Lucene search
K

CVE-2023-1997

🗓️ 28 Aug 2023 15:37:21Reported by 3DSType 
cve
 cve
🔗 web.nvd.nist.gov👁 40 Views

An OS Command Injection vulnerability exists in SIMULIA 3DOrchestrate from Release 3DEXPERIENCE R2021x through Release 3DEXPERIENCE R2023x. A specially crafted HTTP request can lead to arbitrary command execution

Related
Detection
Affected
Refs
NVD
Node
3ds3dexperienceMatchr2021x
OR
3ds3dexperienceMatchr2022x
OR
3ds3dexperienceMatchr2023x
[
  {
    "vendor": "Dassault Systèmes",
    "product": "SIMULIA 3DOrchestrate",
    "versions": [
      {
        "status": "affected",
        "version": "Release 3DEXPERIENCE R2021x Golden",
        "lessThanOrEqual": "Release 3DEXPERIENCE R2021x.FP.CFA.2306",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "Release 3DEXPERIENCE R2022x Golden",
        "lessThanOrEqual": "Release 3DEXPERIENCE R2022x FP.CFA.2310",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "Release 3DEXPERIENCE R2023x Golden",
        "lessThanOrEqual": "Release 3DEXPERIENCE R2023x.FP.CFA.2314",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 07:40Current
9.1High risk
Vulners AI Score9.1
CVSS 3.18.8
EPSS0.00327
SSVC
40