CVE-2023-40265

Summary

CVE-2023-40265 is a remote code execution vulnerability affecting Atos Unify OpenScape Xpressions WebAssistant version prior to V7R1 FR5 HF42 P911. Malicious users with authentication credentials can exploit this issue by uploading specially crafted files, which are then executed on the vulnerable system, allowing for arbitrary code execution. Successful exploitation could result in serious security implications, including unauthorized system access and data breaches. Organizations using Atos Unify OpenScape Xpressions WebAssistant are urged to update to a patched version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.