8.8
CVE-2023-47716
- EPSS 0.02%
- Veröffentlicht 01.03.2024 03:15:06
- Zuletzt bearbeitet 15.08.2025 20:06:50
- Quelle psirt@us.ibm.com
- CVE-Watchlists
- Unerledigt
IBM FileNet Content Manager privilege escalation
IBM CP4BA - Filenet Content Manager Component 5.5.8.0, 5.5.10.0, and 5.5.11.0 could allow a user to gain the privileges of another user under unusual circumstances. IBM X-Force ID: 271656.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Cp4ba - Filenet Content Manager Version21.0.3
Ibm ≫ Cp4ba - Filenet Content Manager Version23.0.1
Ibm ≫ Filenet Content Manager Version5.5.8
Ibm ≫ Filenet Content Manager Version5.5.10
Ibm ≫ Filenet Content Manager Version5.5.11
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.02% | 0.063 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| psirt@us.ibm.com | 6.3 | 2.8 | 3.4 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
|
CWE-863 Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.