VULNERABILITY INTELLIGENCE

CVE-2023-2140

CVSS score7.5 HIGH
EPSS probability0.56%
CISA KEVNot currently listed
Published2023-04-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

A Server-Side Request Forgery vulnerability in DELMIA Apriso Release 2017 through Release 2022 could allow an unauthenticated attacker to issue requests to arbitrary hosts on behalf of the server running the DELMIA Apriso application.

Weakness classification

  • CWE-918: Server-Side Request Forgery (SSRF)

Primary references