CVE-2023-28504

9.8 criticalEPSS 1.4%

Critical (9.8) in rocketsoftware. EPSS 1.4% chance of exploitation in the next 30 days.

Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a stack-based buffer overflow that can lead to remote code execution as the root user.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
CWEs: CWE-787, CWE-120
Published: 2023-03-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

rocketsoftware:unidata
rocketsoftware:universe

References

https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/
https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/

Check your stack JSON