CVE-2023-22890

CVE-2023-22890 affects SmartBear Zephyr Enterprise up to version 7.15.0. The vulnerability allows unauthenticated users to upload large files, which can exhaust local drive space and cause a denial of service. The provided documents confirm the affected product and the exploit scenario (untrusted...

CVE-2023-22889

SmartBear Zephyr Enterprise (

CVE-2023-22892

CVE-2023-22892 : In SmartBear Zephyr Enterprise up to version 7.15.0, there exists an information disclosure vulnerability that could be exploited by unauthenticated users to read arbitrary files from Zephyr instances. The provided documents confirm the affected product and the unauthenticated ac...

CVE-2023-22891

CVE-2023-22891 maps to a privilege-escalation in SmartBear Zephyr Enterprise up to version 7.15.0. Multiple sources indicate that authorized users could reset passwords for other accounts, enabling elevation of privileges with high impact (I/H, A/H, network vector). Publicly disclosed details are...