CVE-2023-5913— A potential Privilege Escalation vulnerability in opentext Fortify ScanCentral DAST API.
Quick assessment
Affected
opentext Fortify ScanCentral DAST
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Micro Focus Fortify ScanCentral DAST是英国Micro Focus公司的一种 Fortify 托管远程扫描应用程序。 Micro Focus Fortify ScanCentral DAST 存在安全漏洞，该漏洞源于权限分配不正确。攻击者利用该漏洞可以提升权限。以下版本受到影响：1.1、21.2、21.2.1、22.1、22.1.1、22.2、23.1。
Possible ATT&CK Techniques 1 AI
T1078 · Valid Accounts
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2023-5913
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
A potential Privilege Escalation vulnerability in opentext Fortify ScanCentral DAST API.
Source: CVE Program / CVE List V5
Vulnerability Description
Incorrect Privilege Assignment vulnerability in opentext Fortify ScanCentral DAST. The vulnerability could be exploited to gain elevated privileges.This issue affects Fortify ScanCentral DAST versions 21.1, 21.2, 21.2.1, 22.1, 22.1.1, 22.2, 23.1.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
特权授予不正确
Source: CVE Program / CVE List V5
Vulnerability Title
Micro Focus Fortify ScanCentral DAST 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Micro Focus Fortify ScanCentral DAST是英国Micro Focus公司的一种 Fortify 托管远程扫描应用程序。 Micro Focus Fortify ScanCentral DAST 存在安全漏洞，该漏洞源于权限分配不正确。攻击者利用该漏洞可以提升权限。以下版本受到影响：1.1、21.2、21.2.1、22.1、22.1.1、22.2、23.1。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| opentext | Fortify ScanCentral DAST | 21.1 | - |
|
II. Public POCs for CVE-2023-5913
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-5913
请登录查看更多情报信息。
Other References for CVE-2023-5913 (1)
IV. Related Vulnerabilities
Same vendor: opentext
-
CVE-2026-13202
HTML Injection in OTDS Swagger UI -
CVE-2026-11877
Missing Authorization Vulnerability in OpenText Access Manag -
CVE-2026-11878
Reflected Cross-Site Scripting vulnerability in OpenText Acc -
CVE-2026-2123
Privilege escalation vulnerability in Operations Agent -
CVE-2024-11604
Insertion of Sensitive Information into Log File
Same weakness: CWE-266
-
CVE-2026-75910
Incorrect privilege assignment in the Amazon aws-athena-quer -
CVE-2026-66682
WordPress Abandoned Cart Pro for WooCommerce plugin <= 10.4. -
CVE-2025-15689
WordPress Capella theme <= 2.5.5 - Privilege Escalation vuln -
CVE-2026-11861
Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating -
CVE-2026-73390
WordPress Total Donations plugin <= 2.0.5 - Privilege Escala
V. Comments for CVE-2023-5913
No comments yet