CVE-2023-25834

MEDIUM Year: 2023
CVSS v3 Score
5.4
Medium
Weakness Type
CWE-269
View all →

Vulnerability Description

Changes to user permissions in Portal for ArcGIS 10.9.1 and below are incompletely applied in specific use cases. This issue may allow users to access content that they are no longer privileged to access.

Related Vulnerabilities

CVE-2017-10046

MEDIUM
CVSS:5.4(Medium)

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 8.3, 8.4, 15...

CWE-2692017

CVE-2017-10094

MEDIUM
CVSS:5.4(Medium)

Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security). Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerabili...

CWE-2692017

CVE-2017-10098

MEDIUM
CVSS:5.4(Medium)

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0, 12.0...

CWE-2692017

CVE-2017-10142

MEDIUM
CVSS:5.4(Medium)

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Mobile Apps). Supported versions that are affected are 8.5.1 and 9.0.0. Easi...

CWE-2692017

CVE-2017-1493

MEDIUM
CVSS:5.4(Medium)

IBM UrbanCode Deploy (UCD) 6.1 and 6.2 could allow an authenticated user to edit objects that they should not have access to due to improper access controls. IBM X-Force ID: 128691.

CWE-2692017

CVE-2019-4546

MEDIUM
CVSS:5.4(Medium)

After installing the IBM Maximo Health- Safety and Environment Manager 7.6.1, a user is granted additional privileges that they are not normally allowed to access. IBM X-Force ID: 165948.

CWE-2692019