First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2023-32083

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

Microsoft Failover Cluster Information Disclosure Vulnerability

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
Microsoft	Windows Server 2019	>= 10.0.17763.0, < 10.0.17763.4645
Microsoft	Windows Server 2019 (Server Core installation)	>= 10.0.17763.0, < 10.0.17763.4645
Microsoft	Windows Server 2022	>= 10.0.20348.0, < 10.0.20348.1850
Microsoft	Windows Server 2016	>= 10.0.14393.0, < 10.0.14393.6085
Microsoft	Windows Server 2016 (Server Core installation)	>= 10.0.14393.0, < 10.0.14393.6085

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32083Patch, Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32083Patch, Vendor Advisory

Timeline

Published: Jul 11, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-320847.5HTTP.sys Denial of Service Vulnerability CVE-2023-320855.5Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability CVE-2023-320876.1Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with task creation CVE-2023-320886.1Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with ad-hoc case creation CVE-2023-320896.1Pega Platform versions 8.1 to 8.8.2 are affected by an XSS issue with Pin description CVE-2023-32093.5The MStore API WordPress plugin before 3.9.7 does not secure most of its AJAX actions by implementing privilege checks, nonce checks, or a c CVE-2023-320909.8Pega platform clients who are using versions 6.1 through 7.3.1 may be utilizing default credentials CVE-2023-320918.8Cross-Site Request Forgery (CSRF) vulnerability in POEditor plugin <= 0.9.4 versions.CVE-2023-320928.8Cross-Site Request Forgery (CSRF) vulnerability in PeepSo Community by PeepSo – Social Network, Membership, Registration, User Profiles plug CVE-2023-320938.8Cross-Site Request Forgery (CSRF) vulnerability in Criss Swaim TPG Redirect plugin <= 1.0.7 versions.CVE-2023-320945.4Missing Authorization vulnerability in Felix Welberg Extended Post Status allows Exploiting Incorrectly Configured Access Control Security L CVE-2023-320958.8Improper Control of Generation of Code ('Code Injection') vulnerability in Milan Dinić Rename Media Files.This issue affects Rename Media Fi