CVE-2023-43767

Certain WithSecure products allow Denial of Service via the aepack archive unpack handler. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 1...

CVE-2023-43763

Certain WithSecure products allow XSS via an unvalidated parameter in the endpoint. This affects WithSecure Policy Manager 15 on Windows and Linux...

CVE-2023-43767: Uncontrolled Resource Consumption

Certain WithSecure products allow Denial of Service via the aepack archive unpack handler. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 1...

CVE-2023-43763

CVE-2023-43763 affects WithSecure Policy Manager 15 on Windows and Linux. The issue—an XSS vulnerability—stems from an unvalidated parameter in a web endpoint, indicating insufficient input validation in the affected component. The CVSS 3.1 base score is 6.1 (MEDIUM) with Network access, Low conf...

CVE-2023-43762

CVE-2023-43762 affects WithSecure Policy Manager 15 and Policy Manager Proxy 15, allowing unauthenticated remote code execution via the web server (backend). The Red Hat, NVD, and CN literature corroborate this description across multiple feeds. The core issue is an unauthenticated RCE path reach...

CVE-2023-43760: Undefined Security Weakness

Certain WithSecure products allow Denial of Service via a fuzzed PE32 file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure...

CVE-2023-43766

Certain WithSecure products allow Local privilege escalation via the lhz archive unpack handler. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for...

CVE-2023-43765

Summary : CVE-2023-43765 affects multiple WithSecure products due to a Denial of Service manifested in the aeelf component. Affected versions include: WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 ...

CVE-2023-43766

This CVE (CVE-2023-43766) affects multiple WithSecure products, including Client Security 15, Server Security 15, Email and Server Security 15, Elements Endpoint Protection 17 and later, Client Security for Mac 15, Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0, Linux P...

CVE-2023-43761

CVE-2023-43761 affects multiple WithSecure products (Client Security 15, Server Security 15, Email and Server Security 15, Elements Endpoint Protection 17+, Client Security for Mac 15, Elements Endpoint Protection for Mac 17+, Linux Security 64 12.0, Linux Protection 12.0, and WithSecure Atlant 1...

CVE-2023-43767

CVE-2023-43767 affects multiple WithSecure products via the aepack archive unpack handler, causing Denial of Service. Affected items include WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later,...

CVE-2023-43760

CVE-2023-43760 concerns a DoS in WithSecure product family triggered by processing a fuzzed PE32 file. Affected products include WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later (and for Mac...

CVE-2023-43766: Improper Privilege Management

Certain WithSecure products allow Local privilege escalation via the lhz archive unpack handler. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for...

CVE-2023-43765: Undefined Security Weakness

Certain WithSecure products allow Denial of Service in the aeelf component. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure...

CVE-2023-43763: Improper Neutralization of Input During Web Page Generation

Certain WithSecure products allow XSS via an unvalidated parameter in the endpoint. This affects WithSecure Policy Manager 15 on Windows and Linux...

CVE-2023-43762: Undefined Security Weakness

Certain WithSecure products allow Unauthenticated Remote Code Execution via the web server backend. This affects WithSecure Policy Manager 15 and Policy Manager Proxy 15...

CVE-2023-43761: Loop with Unreachable Exit Condition

Certain WithSecure products allow Denial of Service infinite loop. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements...

WithSecure products Cross-site Scripting Vulnerability

WithSecure products is a series of security software from the Finnish company WithSecure. A cross-site scripting vulnerability exists in WithSecure Policy Manager version 15, which stems from allowing XSS via unverified parameters in an endpoint...

PT-2023-28969 · Withsecure · Withsecure Elements Endpoint Protection +5

Name of the Vulnerable Software and Affected Versions: WithSecure Client Security version 15 WithSecure Server Security version 15 WithSecure Email and Server Security version 15 WithSecure Elements Endpoint Protection versions 17 and later WithSecure Client Security for Mac version 15 WithSecure...

PT-2023-28971 · Withsecure · Withsecure Policy Manager Proxy +1

Name of the Vulnerable Software and Affected Versions: WithSecure Policy Manager version 15 WithSecure Policy Manager Proxy version 15 Description: The issue allows Unauthenticated Remote Code Execution via the web server backend. This is a significant problem as it can be exploited without the...