VULNERABILITY INTELLIGENCE

CVE-2023-47294

CVSS score8.1 HIGH

EPSS probability0.33%

CISA KEVNot currently listed

Published2025-06-23

Last modified2026-06-17

Description

An issue in NCR Terminal Handler v1.5.1 allows low-level privileged authenticated attackers to arbitrarily deactivate, lock, and delete user accounts via a crafted session cookie.