CVE-2023-39415

HighCVSS 7.5

Published: 18/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.76%

50th percentile - higher than 50% of all known CVEs

Summary

CVE-2023-39415 describes an improper authentication vulnerability in Proself Enterprise/Standard Edition versions up to 5.61, Proself Gateway Edition versions up to 1.62, and Proself Mail Sanitize Edition versions up to 1.07. This allows a remote unauthenticated attacker to log in to the product's Control Panel and perform unintended operations.

Risk Assessment

The risk to the organization is that an attacker could gain access to sensitive system functions, potentially leading to unauthorized changes or data breaches.

Recommendation

It is recommended to update to the latest versions of the software that address this vulnerability and to implement additional security measures, such as monitoring access to the Control Panel.

Other vulnerabilities in Proself Enterprise/Standard Edition, Proself Gateway Edition, Proself Mail Sanitize Edition

CVE-2023-39416High
Proself Enterprise/Standard Edition version 5.61 and earlier, Proself Gateway Edition version 1.62 and earlier, and Proself Mail Sanitize Edition version 1.07 and earlier allow a remote authenticated attacker with administrative privileges to execute arbitrary OS commands.

Original NVD description (English source)

Improper authentication vulnerability in Proself Enterprise/Standard Edition Ver5.61 and earlier, Proself Gateway Edition Ver1.62 and earlier, and Proself Mail Sanitize Edition Ver1.07 and earlier allow a remote unauthenticated attacker to log in to the product's Control Panel and perform an unintended operation.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS