2 matches found
CVE-2023-49328
On a Wolters Kluwer B.POINT 23.70.00 server running Linux on premises, during the authentication phase, a validated system user can achieve remote code execution via Argument Injection in the server-to-server module...
7.2CVSS8.4AI score0.0096EPSS
SaveExploits0References1
CVE-2023-49328: Improper Neutralization of Special Elements in Output Used by a Downstream Component
On a Wolters Kluwer B.POINT 23.70.00 server running Linux on premises, during the authentication phase, a validated system user can achieve remote code execution via Argument Injection in the server-to-server module...
7.2CVSS7.6AI score0.0096EPSS
SaveExploits0References2
20