CVE-2023-3313

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An OS common injection vulnerability exists in the ESM certificate API, whereby incorrectly neutralized special elements may have allowed an unauthorized user to execute system command injection for the purpose of privilege escalation or to execute arbitrary commands.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

VendorProductVersions
TrellixEnterprise Security Manager11.6.3

References

Timeline

Published
Jul 3, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-331307.3Microsoft SharePoint Server Spoofing VulnerabilityCVE-2023-331318.8Microsoft Outlook Remote Code Execution VulnerabilityCVE-2023-331326.3Microsoft SharePoint Server Spoofing VulnerabilityCVE-2023-331337.8Microsoft Excel Remote Code Execution VulnerabilityCVE-2023-331348.8Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2023-331357.3.NET and Visual Studio Elevation of Privilege VulnerabilityCVE-2023-331368.8Azure DevOps Server Remote Code Execution VulnerabilityCVE-2023-331377.8Microsoft Excel Remote Code Execution VulnerabilityCVE-2023-331395.5Visual Studio Information Disclosure VulnerabilityCVE-2023-33148.8A vulnerability arises out of a failure to comprehensively sanitize the processing of a zip file(s). Incomplete neutralization of external cCVE-2023-331406.5Microsoft OneNote Spoofing VulnerabilityCVE-2023-331417.5Yet Another Reverse Proxy (YARP) Denial of Service Vulnerability
CVE-2023-3313: High severity, CVSS 7.8 | Vulnix