Remote code execution

On a Wolters Kluwer B.POINT 23.70.00 server running Linux on premises, during the authentication phase, a validated system user can achieve remote code execution via Argument Injection in the server-to-server module...

Wolters Kluwer B.POINT Security Vulnerability

Wolters Kluwer B.POINT is a solution for accountants and employment consultants from Wolters Kluwer Netherlands. A security vulnerability exists in Wolters Kluwer B.POINT version 23.70.00. An attacker can exploit the vulnerability to remotely execute code...

CVE-2023-49328

CVE-2023-49328 affects Wolters Kluwer B.POINT 23.70.00 on Linux on‑prem, enabling remote code execution via Argument Injection in the server‑to‑server module during authentication. Multiple sources (NVD, Red Hat, PRION, CNNVD, CVE list) describe the vulnerability and its impact as remote code exe...