CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2023-43762
Critical (9.8) in withsecure. EPSS 1.4% chance of exploitation in the next 30 days.
Certain WithSecure products allow Unauthenticated Remote Code Execution via the web server (backend). This affects WithSecure Policy Manager 15 and Policy Manager Proxy 15.
Severity
- EPSS
- 1.4% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- withsecure:f-secure_policy_manager
- withsecure:policy_manager_proxy
References
- https://www.withsecure.com/en/support/security-advisories
- https://www.withsecure.com/en/support/security-advisories/cve-2023-43762
- https://www.withsecure.com/en/support/security-advisories/cve-2023-nnn511
- https://www.withsecure.com/en/support/security-advisories
- https://www.withsecure.com/en/support/security-advisories/cve-2023-43762