CVE-2023-28023

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

A cross site request forgery vulnerability in the BigFix WebUI Software Distribution interface site version 44 and before allows an NMO attacker to access files on server side systems (server machine and all the ones in its network).

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-352

Affected software

No affected versions have been published.

Timeline

Published
Jul 18, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-280254.8Due to this vulnerability, the Master operator could potentially incorporate an SVG tag into HTML, leading to an alert pop-up displaying a cCVE-2023-280266.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentCVE-2023-280276.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentCVE-2023-280286.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentCVE-2023-280296.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentCVE-2023-28036.1The Ultimate Addons for Contact Form 7 WordPress plugin before 3.1.29 does not sanitise and escape a parameter before outputting it back in CVE-2023-280306.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentCVE-2023-280316.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentCVE-2023-280326.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentCVE-2023-280336.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentCVE-2023-280346.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentCVE-2023-280356.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potent
CVE-2023-28023: Medium severity, CVSS 6.5 | Vulnix