AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2023-28323

CRITICAL · CVSS 9.8 EPSS 3.15% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-07-01 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2023-28323
Severity
CRITICAL
CVSS
9.8
EPSS
3.15%

Original NVD Description

A deserialization of untrusted data exists in EPM 2022 Su3 and all prior versions that allows an unauthenticated user to elevate rights. This exploit could potentially be used in conjunction with other OS (Operating System) vulnerabilities to escalate privileges on the machine or be used as a stepping stone to get to other network attached machines.

Related CVEs

Other vulnerabilities affecting the same vendor(s)