Critical · 9.8 CVE-2023-43762 EUVD-2023-48139GHSA-jvv5-74p3-9q8j

Certain WithSecure products allow Unauthenticated Remote Code Execution via the web server (backend). This affects WithSecure Policy Manage…

Published Sep 22, 2023 · Updated Sep 25, 2024 · Assigned by mitre

Description

Certain WithSecure products allow Unauthenticated Remote Code Execution via the web server (backend). This affects WithSecure Policy Manager 15 and Policy Manager Proxy 15.

Advisories 1

WID-SEC-2023-0565 F-Secure Policy Manager: Mehrere Schwachstellen ermöglichen Cross-Site Scripting BSI CERT-Bund (WID) · Sep 26, 2023

References

https://www.withsecure.com/en/support/security-advisories
https://www.withsecure.com/en/support/security-advisories/cve-2023-nnn511
https://www.withsecure.com/en/support/security-advisories/cve-2023-43762

EUVD	v3.1	9.8
CISA-ADP	v3.1	9.8