CVE-2023-34203: High severity Progress OpenEdge vulnerability
In Progress OpenEdge OEM (OpenEdge Management) and OEE (OpenEdge Explorer) before 12.7, a remote user (who has any OEM or OEE role) could perform a URL injection attack to change identity or role membership, e.g., escalate to admin. This affects OpenEdge LTS before 11.7.16, 12.x before 12.2.12, and 12.3.x through 12.6.x before 12.7.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-34203?
CVE-2023-34203 is a vulnerability in In Progress OpenEdge OEM (OpenEdge Management) and OEE (OpenEdge Explorer) before version 12.7.
What is the severity of CVE-2023-34203?
CVE-2023-34203 has a severity score of 8.8 (high severity).
Which software versions are affected by CVE-2023-34203?
CVE-2023-34203 affects OpenEdge LTS before version 11.7.16, 12.x before version 12.2.12, and OpenEdge OEM and OEE up to version 12.7.
How can a remote user exploit CVE-2023-34203?
A remote user with any OEM or OEE role could perform a URL injection attack to change identity or role membership, potentially escalating to admin.
Where can I find more information about CVE-2023-34203?
More information about CVE-2023-34203 can be found at the Progress OpenEdge website.