2023 CVE Vulnerabilities
31,510 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-25468 | HIGH | 8.8 | 0.3% | Jul 11, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Reservation.Studio Reservation.Studio widget plugin <= 1.0.11 version... |
| CVE-2023-25051 | HIGH | 8.8 | 0.3% | Jul 11, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Denishua Comment Reply Notification plugin <= 1.4 versions. |
| CVE-2023-24421 | HIGH | 8.8 | 0.3% | Jul 11, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in WP Engine PHP Compatibility Checker plugin <= 1.5.2 versions. |
| CVE-2023-23997 | HIGH | 8.8 | 0.3% | Jul 11, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Dave Jesch Database Collation Fix plugin <= 1.2.7 versions. |
| CVE-2023-23731 | HIGH | 8.8 | 0.3% | Jul 11, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in HasTheme WishSuite plugin <= 1.3.3 versions. |
| CVE-2023-23704 | HIGH | 8.8 | 0.3% | Jul 11, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Pixelgrade Comments Ratings plugin <= 1.1.6 versions. |
| CVE-2023-1936 | MEDIUM | 4.3 | 0.5% | Jul 11, 2023 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7 before 15.11.10, all versions sta... |
| CVE-2023-23803 | HIGH | 8.8 | 0.3% | Jul 11, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in HasThemes JustTables plugin <= 1.4.9 versions. |
| CVE-2023-23791 | HIGH | 8.8 | 0.3% | Jul 11, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in HasThemes HT Menu plugin <= 1.2.1 versions. |
| CVE-2023-23792 | HIGH | 8.8 | 0.3% | Jul 11, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in HasThemes Swatchly plugin <= 1.2.0 versions. |
| CVE-2023-36925 | HIGH | 7.2 | 0.5% | Jul 11, 2023 | SAP Solution Manager (Diagnostics agent) - version 7.20, allows an unauthenticated attacker to blindly execute HTTP requ... |
| CVE-2023-36924 | MEDIUM | 4.9 | 0.4% | Jul 11, 2023 | While using a specific function, SAP ERP Defense Forces and Public Security - versions 600, 603, 604, 605, 616, 617, 618... |
| CVE-2023-36922 | HIGH | 8.8 | 0.7% | Jul 11, 2023 | Due to programming error in function module and report, IS-OIL component in SAP ECC and SAP S/4HANA allows an authentica... |
| CVE-2023-36921 | HIGH | 7.2 | 0.5% | Jul 11, 2023 | SAP Solution Manager (Diagnostics agent) - version 7.20, allows an attacker to tamper with headers in a client request. ... |
| CVE-2023-36919 | MEDIUM | 5.3 | 0.4% | Jul 11, 2023 | In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the R... |
| CVE-2023-36918 | MEDIUM | 6.1 | 0.3% | Jul 11, 2023 | In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the X... |
| CVE-2023-36917 | HIGH | 7.5 | 0.5% | Jul 11, 2023 | SAP BusinessObjects Business Intelligence Platform - version 420, 430, allows an unauthorized attacker who had hijacked ... |
| CVE-2023-35874 | HIGH | 7.4 | 0.3% | Jul 11, 2023 | SAP NetWeaver Application Server ABAP and ABAP Platform - version KRNL64NUC, 7.22, KRNL64NUC 7.22EXT, KRNL64UC 7.22, KRN... |
| CVE-2023-35873 | MEDIUM | 6.5 | 0.5% | Jul 11, 2023 | The Runtime Workbench (RWB) of SAP NetWeaver Process Integration - version SAP_XITOOL 7.50, does not perform authenticat... |
| CVE-2023-35872 | MEDIUM | 6.5 | 0.5% | Jul 11, 2023 | The Message Display Tool (MDT) of SAP NetWeaver Process Integration - version SAP_XIAF 7.50, does not perform authentica... |
| CVE-2023-35871 | CRITICAL | 9.4 | 0.5% | Jul 11, 2023 | The SAP Web Dispatcher - versions WEBDISP 7.53, WEBDISP 7.54, WEBDISP 7.77, WEBDISP 7.85, WEBDISP 7.89, WEBDISP 7.91, WE... |
| CVE-2023-35870 | HIGH | 7.3 | 0.3% | Jul 11, 2023 | When creating a journal entry template in SAP S/4HANA (Manage Journal Entry Template) - versions S4CORE 104, 105, 106, 1... |
| CVE-2023-33992 | MEDIUM | 6.5 | 0.4% | Jul 11, 2023 | The SAP BW BICS communication layer in SAP Business Warehouse and SAP BW/4HANA - version SAP_BW 730, SAP_BW 731, SAP_BW ... |
| CVE-2023-33990 | HIGH | 7.1 | 0.1% | Jul 11, 2023 | SAP SQL Anywhere - version 17.0, allows an attacker to prevent legitimate users from accessing the service by crashing t... |
| CVE-2023-33989 | HIGH | 8.1 | 0.8% | Jul 11, 2023 | An attacker with non-administrative authorizations in SAP NetWeaver (BI CONT ADD ON) - versions 707, 737, 747, 757, can ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now