VULNERABILITY INTELLIGENCE

CVE-2023-47298

CVSS score4.3 MEDIUM
EPSS probability0.28%
CISA KEVNot currently listed
Published2025-06-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

An issue in NCR Terminal Handler 1.5.1 allows a low-level privileged authenticated attacker to query the SOAP API endpoint to obtain information about all of the users of the application including their usernames, roles, security groups and account statuses.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-200

Primary references