CVE-2020-23446

MediumCVSS 5.3

Published: 22/09/2020(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.23%

65th percentile - higher than 65% of all known CVEs

Summary

The Verint Workforce Optimization suite version 15.1 (15.1.0.37634) has an unauthenticated information disclosure vulnerability via API. An attacker without valid credentials can access sensitive data.

Risk Assessment

The risk is potential leakage of confidential organizational information without requiring any account in the system, which can lead to data privacy breaches and reputational damage.

Recommendation

It is recommended to immediately update the Verint Workforce Optimization suite to the latest available version that fixes this vulnerability. Also restrict API access to authenticated users only.

Original NVD description (English source)

Verint Workforce Optimization suite 15.1 (15.1.0.37634) has Unauthenticated Information Disclosure via API