CVE-2023-48665

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

Dell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability. A remote malicious user with high privileges could potentially exploit this vulnerability leading to the execution of arbitrary OS commands on the affected system.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published
Dec 14, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-486677.2Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in aCVE-2023-486686.7Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 on DDMC contain an OS command injection vulnerabilCVE-2023-48678.8A vulnerability was found in Xintian Smart Table Integrated Management System 5.6.9. It has been classified as critical. Affected is an unknCVE-2023-486707.8Dell SupportAssist for Home PCs version 3.14.1 and prior versions contain a privilege escalation vulnerability in the installer. A local lowCVE-2023-486717.5Dell vApp Manager, versions prior to 9.2.4.x contain an information disclosure vulnerability. A remote attacker could potentially exploit thCVE-2023-486744.9Dell Platform BIOS contains an Improper Null Termination vulnerability. A high privilege user with network access to the system could potentCVE-2023-486767.1Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect CCVE-2023-486777.8Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office (WindoCVE-2023-486785.5Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 16 (Linux, WCVE-2023-486795.4Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage. The following products are affected: AcroniCVE-2023-48688.8A vulnerability was found in SourceCodester Contact Manager App 1.0. It has been declared as problematic. Affected by this vulnerability is CVE-2023-486805.5Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Cyber Prote
CVE-2023-48665: High severity, CVSS 7.2 | Vulnix