CVE-2023-43762

—

CVSS 3.1

9.8 critical

EPSS

1%p64

Published

Sep 22, 2023 (Sep 22, 2023)

Modified

Jun 17, 2026

Description

Certain WithSecure products allow Unauthenticated Remote Code Execution via the web server (backend). This affects WithSecure Policy Manager 15 and Policy Manager Proxy 15.

Vendors: withsecure
Products: f-secure policy manager, policy manager proxy
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.