CVE-2023-47298

4.3 mediumEPSS 0.3%

Medium (4.3) in ncr terminal handler. EPSS 0.3% chance of exploitation in the next 30 days.

An issue in NCR Terminal Handler 1.5.1 allows a low-level privileged authenticated attacker to query the SOAP API endpoint to obtain information about all of the users of the application including their usernames, roles, security groups and account statuses.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 20% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2025-06-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ncr:terminal_handler

References

https://drive.google.com/file/d/1-BDd0ycuYhuxo-lg4th-Cswimoqqzkot/view?usp=sharing
https://github.com/pwahba/cve-research/blob/main/CVE-2023-47298/CVE-2023-47298.md

Check your stack JSON