CVE-2023-39416

HighCVSS 7.2

Published: 18/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.87%

54th percentile - higher than 54% of all known CVEs

Summary

Proself Enterprise/Standard Edition version 5.61 and earlier, Proself Gateway Edition version 1.62 and earlier, and Proself Mail Sanitize Edition version 1.07 and earlier allow a remote authenticated attacker with administrative privileges to execute arbitrary OS commands.

Risk Assessment

An attacker could exploit this vulnerability to gain control over the system, potentially leading to serious security breaches and data loss.

Recommendation

It is recommended to update to the latest versions of the software to mitigate this vulnerability and to monitor systems for potential attack attempts.

Other vulnerabilities in Proself Enterprise/Standard Edition, Proself Gateway Edition, Proself Mail Sanitize Edition

CVE-2023-39415High
CVE-2023-39415 describes an improper authentication vulnerability in Proself Enterprise/Standard Edition versions up to 5.61, Proself Gateway Edition versions up to 1.62, and Proself Mail Sanitize Edition versions up to 1.07. This allows a remote unauthenticated attacker to log in to the product's Control Panel and perform unintended operations.

Original NVD description (English source)

Proself Enterprise/Standard Edition Ver5.61 and earlier, Proself Gateway Edition Ver1.62 and earlier, and Proself Mail Sanitize Edition Ver1.07 and earlier allow a remote authenticated attacker with an administrative privilege to execute arbitrary OS commands.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS