CVE-2023-32265 is a medium-severity vulnerability (CVSS 6.5) in the Enterprise Server Common Web Administration (ESCWA) component of Micro Focus Enterprise Server, Enterprise Developer, Visual COBOL, and COBOL Server. An authenticated attacker could exploit this to expose a service account password, which typically has limited privileges but could reveal user account details. While requiring authentication and having existing mitigations, the vulnerability has no known public exploits, Metasploit modules, or significant community discussion, indicating a low current exploitation risk.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
6.0CPE matchmatch criteria | cpe:2.3:a:microfocus:cobol_server:6.0:-:*:*:*:*:*:* | ||
7.0CPE matchmatch criteria | cpe:2.3:a:microfocus:cobol_server:7.0:-:*:*:*:*:*:* | ||
8.0CPE matchmatch criteria | cpe:2.3:a:microfocus:cobol_server:8.0:-:*:*:*:*:*:* | ||
6.0CPE matchmatch criteria | cpe:2.3:a:microfocus:enterprise_developer:6.0:-:*:*:*:*:*:* | ||
7.0CPE matchmatch criteria | cpe:2.3:a:microfocus:enterprise_developer:7.0:-:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.