First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2023-39374

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

ForeScout NAC SecureConnector version 11.2 - CWE-427: Uncontrolled Search Path Element

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
ForeScout	NAC SecureConnector	—

References

Timeline

Published: Sep 3, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-393759.8SiberianCMS - CWE-274: Improper Handling of Insufficient Privileges CVE-2023-393766.5SiberianCMS - CWE-284 Improper Access Control Authorized user may disable a security feature over the network CVE-2023-393777.2SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to uplo CVE-2023-393788.8SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') by an unauthenticated user CVE-2023-393797.5Fujitsu Software Infrastructure Manager (ISM) stores sensitive information at the product's maintenance data (ismsnap) in cleartext form. As CVE-2023-39384.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ZkTeco-based OEM devices allows an a CVE-2023-393807.5Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause audio devices to perform abnor CVE-2023-393817.5Input verification vulnerability in the storage module. Successful exploitation of this vulnerability may cause the device to restart.CVE-2023-393827.5Input verification vulnerability in the audio module. Successful exploitation of this vulnerability may cause virtual machines (VMs) to rest CVE-2023-393837.5Vulnerability of input parameters being not strictly verified in the AMS module. Successful exploitation of this vulnerability may compromis CVE-2023-393847.5Vulnerability of incomplete permission verification in the input method module. Successful exploitation of this vulnerability may cause feat CVE-2023-393859.1Vulnerability of configuration defects in the media module of certain products.. Successful exploitation of this vulnerability may cause una

CVE-2023-39374: High severity, CVSS 7.8 | Vulnix