Vulnerability Details CVE-2023-5516
Poorly constructed webap requests and URI components with special characters trigger unhandled errors and exceptions, disclosing
information about the underlying technology and other sensitive information details. The website unintentionally reveals sensitive information including technical details like version Info, endpoints,
backend server, Internal IP. etc., which can potentially expose additional attack surface containing other interesting vulnerabilities.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 42.8%
CVSS Severity
CVSS v3 Score 5.3
References
Products affected by CVE-2023-5516
-
cpe:2.3:a:hitachienergy:esoms:-
-
cpe:2.3:a:hitachienergy:esoms:3.9
-
cpe:2.3:a:hitachienergy:esoms:4.0
-
cpe:2.3:a:hitachienergy:esoms:6.0
-
cpe:2.3:a:hitachienergy:esoms:6.0.2
-
cpe:2.3:a:hitachienergy:esoms:6.0.3
-
cpe:2.3:a:hitachienergy:esoms:6.0.4
-
cpe:2.3:a:hitachienergy:esoms:6.0.4.2.2
-
cpe:2.3:a:hitachienergy:esoms:6.1
-
cpe:2.3:a:hitachienergy:esoms:6.1.4
-
cpe:2.3:a:hitachienergy:esoms:6.3
-
cpe:2.3:a:hitachienergy:esoms:6.3.1
-
cpe:2.3:a:hitachienergy:esoms:6.3.13