CVE-2023-22523critical

CVE-2023-22523: critical vulnerability in Atlassian Assets Discovery Cloud

Published · Updated

Follow this CVE+ Monitor Assets Discovery Data Center+ Monitor Assets Discovery Cloud

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

33Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.8epss 11%
This vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code Execution) on machines with the Assets Discovery agent installed. The vulnerability exists between the Assets Discovery application (formerly known as Insight Discovery) and the Assets Discovery agent.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Atlassian · Assets Discovery CloudAtlassian · Assets Discovery Data Center
Related CVEs — Atlassian Assets Discovery Cloud

In the same product, most dangerous first.

CVE-2024-21682HIGHCVE-2024-21682EPSS 0.8%