{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-01T10:17:10.141","vulnerabilities":[{"cve":{"id":"CVE-2023-45353","sourceIdentifier":"cve@mitre.org","published":"2023-10-09T04:15:54.607","lastModified":"2026-06-17T06:28:40.410","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated attacker to execute arbitrary code on the operating system by leveraging the Common Management Portal web interface for Authenticated remote upload and creation of arbitrary files affecting the underlying operating system. This is also known as OCMP-6591."},{"lang":"es","value":"Atos Unify OpenScape Common Management Portal V10 anterior a V10 R4.17.0 y V10 R5.1.0 permite a un atacante autenticado ejecutar código arbitrario en el sistema operativo aprovechando la interfaz web del Common Management Portal para carga remota autenticada y creación de archivos arbitrarios que afectan el sistema operativo subyacente. Esto también se conoce como OCMP-6591."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-19T15:32:32.177777Z","id":"CVE-2023-45353","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-434"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:atos:unify_openscape_common_management:10:-:*:*:*:*:*:*","matchCriteriaId":"3FAFA13F-9CC4-4F48-8CE0-ECA83EB2EB9A"}]}]}],"references":[{"url":"https://networks.unify.com/security/advisories/OBSO-2306-02.pdf","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.news.de/technik/857003738/unify-openscape-common-management-platform-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-update-zu-bekannten-schwachstellen-und-sicherheitsluecken-vom-03-07-2023/1/","source":"cve@mitre.org","tags":["Press/Media Coverage"]},{"url":"https://networks.unify.com/security/advisories/OBSO-2306-02.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.news.de/technik/857003738/unify-openscape-common-management-platform-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-update-zu-bekannten-schwachstellen-und-sicherheitsluecken-vom-03-07-2023/1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Press/Media Coverage"]}]}}]}