CVE-2023-5913

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Incorrect Privilege Assignment vulnerability in opentext Fortify ScanCentral DAST. The vulnerability could be exploited to gain elevated privileges.This issue affects Fortify ScanCentral DAST versions 21.1, 21.2, 21.2.1, 22.1, 22.1.1, 22.2, 23.1.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-266

Affected software

Vendor	Product	Versions
opentext	Fortify ScanCentral DAST	21.1; 21.2; 21.2.1; 22.1; 22.1.1; 22.2; 23.1

References

https://portal.microfocus.com/s/article/KM000023500?language=en_USVendor Advisory
https://portal.microfocus.com/s/article/KM000023500?language=en_USVendor Advisory

Timeline

Published: Nov 8, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-59146.1Cross-site scripting (XSS)CVE-2023-59155.3A vulnerability of Uncontrolled Resource Consumption has been identified in STARDOM provided by Yokogawa Electric Corporation. This vulnerab CVE-2023-59164.3A vulnerability classified as critical has been found in Lissy93 Dashy 2.1.1. This affects an unknown part of the file /config-manager/save CVE-2023-59176.1A vulnerability, which was classified as problematic, has been found in phpBB up to 3.3.10. This issue affects the function main of the file CVE-2023-59189.8A vulnerability, which was classified as critical, was found in SourceCodester Visitor Management System 1.0. Affected is an unknown functio CVE-2023-59197.2A vulnerability was found in SourceCodester Company Website CMS 1.0 and classified as problematic. Affected by this issue is some unknown fu CVE-2023-59203.3Mattermost Desktop for MacOS fails to utilize the secure keyboard input functionality provided by macOS, allowing for other processes to rea CVE-2023-59217.1Improper Enforcement of Behavioral Workflow vulnerability in DECE Software Geodi allows Functionality Bypass. This issue affects Geodi: bef CVE-2023-59227.5The Royal Elementor Addons and Templates WordPress plugin before 1.3.81 does not ensure that users accessing posts via an AJAX action (and R CVE-2023-59237.5A vulnerability classified as critical has been found in Campcodes Simple Student Information System 1.0. This affects an unknown part of th CVE-2023-59247.5A vulnerability classified as critical was found in Campcodes Simple Student Information System 1.0. This vulnerability affects unknown code CVE-2023-59257.5A vulnerability, which was classified as critical, has been found in Campcodes Simple Student Information System 1.0. This issue affects som