CVE-2023-0476

MEDIUM · CVSS 6.5 EPSS 0.69%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-01-26 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2023-0476

Severity

MEDIUM

CVSS

6.5

EPSS

0.69%

Original NVD Description

A LDAP injection vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning it to users. An authenticated attacker could generate data in Active Directory using the application account through blind LDAP injection.