Lucene search

[email protected]CVE-2023-1287

HistoryMar 09, 2023 - 5:15 p.m.

CVE-2023-1287

2023-03-0917:15:10

CWE-74

CWE-94

[email protected]

web.nvd.nist.gov

cve-2023-1287

xsl template

vulnerability

enovia live collaboration

v6r2013xe

remote code execution

nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.7%

JSON

An XSL template vulnerability in
ENOVIA Live Collaboration V6R2013xE allows Remote Code Execution.

Affected configurations

NVD

Node

3dsenovia_live_collaborationRangev6r2013xe–v6r2013xe_fp.cfa.2240

CPENameOperatorVersion
3ds:enovia_live_collaboration3ds enovia live collaborationltv6r2013xe_fp.cfa.2240

CPE	Name	Operator	Version
3ds:enovia_live_collaboration	3ds enovia live collaboration	lt	v6r2013xe_fp.cfa.2240

CNA Affected

[
  {
    "vendor": "Dassault Systèmes",
    "product": "ENOVIA Live Collaboration",
    "versions": [
      {
        "status": "affected",
        "version": "V6R2013xE Golden",
        "lessThanOrEqual": "V6R2013xE FP.CFA.2228",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.3ds.com/vulnerability/advisories

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.7%

JSON

Related for CVE-2023-1287

nvd1 cvelist1 prion1