What is CVE-2023-7248?

CVE-2023-7248 is a medium-severity vulnerability in Opentext Vertica, classified under Improper Input Validation. CVSS score: 5.0/10. Published 2024-03-15.

How severe is CVE-2023-7248?

Medium severity. CVSS v3 base score is 5.0 out of 10.

Is CVE-2023-7248 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Improper input validation in Opentext Vertica

CVE-2023-7248

Certain functionality in OpenText Vertica Management console might be prone to bypass via crafted requests. The vulnerability would affect one of Vertica’s authentication functionalities by allowing specially crafted requests and sequen…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.003 (23.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.0 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L.

Affected products

Opentext Vertica
Opentext Vertica Management Console — versions 10.x, 11.x, 12.x

Weakness classification (CWE)

CWE-20 — Improper Input Validation

Public proof-of-concept exploits

NaInSec/CVE-LIST

References

security@opentext.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-7248?: CVE-2023-7248 is a medium-severity vulnerability in Opentext Vertica, classified under Improper Input Validation. CVSS score: 5.0/10. Published 2024-03-15.
How severe is CVE-2023-7248?: Medium severity. CVSS v3 base score is 5.0 out of 10.
Is CVE-2023-7248 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.