CVE-2023-38534

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Improper authentication vulnerability in OpenText™ Exceed Turbo X affecting versions 12.5.0 and 12.5.1. The vulnerability could allow disclosure of restricted information in unauthenticated RPC.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-287

Affected software

No affected versions have been published.

Timeline

Published: Mar 13, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2023

CVE-2023-385359.8Use of Hard-coded Cryptographic Key vulnerability in OpenText™ Exceed Turbo X affecting versions 12.5.1 and 12.5.2. The vulnerability could CVE-2023-385366.1HTML injection in OpenText™ Exceed Turbo X affecting version 12.5.1. The vulnerability could result in Cross site scripting.CVE-2023-385375.6A race condition in a network transport subsystem led to a heap use-after-free issue in established or unsilenced incoming audio/video calls CVE-2023-385385.0A race condition in an event subsystem led to a heap use-after-free issue in established audio/video calls that could have resulted in app t CVE-2023-38549.8A vulnerability classified as critical has been found in phpscriptpoint BloodBank 1.1. Affected is an unknown function of the file /search o CVE-2023-385417.8Insecure inherited permissions in some Intel HID Event Filter drivers for Windows 10 for some Intel NUC laptop software installers before ve CVE-2023-385437.8A vulnerability exists on all versions of the Ivanti Secure Access Client below 22.6R1.1, which could allow a locally authenticated attacker CVE-2023-385445.5A logged in user can modify specific files that may lead to unauthorized changes in system-wide configuration settings. This vulnerability c CVE-2023-385459.8This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to the SOCK CVE-2023-385463.7This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of conditions are met. CVE-2023-385479.8A vulnerability in Veeam ONE allows an unauthenticated user to gain information about the SQL server connection Veeam ONE uses to access its CVE-2023-385484.3A vulnerability in Veeam ONE allows an unprivileged user who has access to the Veeam ONE Web Client the ability to acquire the NTLM hash of