{"id":"CVE-2023-40726","aliases":["EUVD-2023-45280","GHSA-p9p5-49xq-6r3q"],"status":"published","title":"A vulnerability has been identified in QMS Automotive (All versions \u003c V12.39). The affected...","description":"A vulnerability has been identified in QMS Automotive (All versions \u003c V12.39). The affected application server responds with sensitive information about the server. This could allow an attacker to directly access the database.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00687,"percentile":0.52992,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-550"],"published":"2023-09-12T09:32:26Z","modified":"2026-06-17T06:19:16Z","products":[{"vendor":"siemens","product":"qms automotive"},{"vendor":"siemens","product":"qms_automotive"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-147266.pdf","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40726"},{"url":"https://github.com/advisories/GHSA-p9p5-49xq-6r3q"}],"sources":{"cve":[{"id":"CVE-2023-40726","description":"A vulnerability has been identified in QMS Automotive (All versions \u003c V12.39). The affected application server responds with sensitive information about the server. This could allow an attacker to directly access the database.","status":"published","published":"2023-09-12T09:32:26.511Z","modified":"2025-02-27T20:55:59.46Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"high","assessor":"cna"}],"cwes":["CWE-550"],"updated_at":"2026-11-02T14:35:22.309324Z"}],"euvd":[{"id":"EUVD-2023-45280","description":"A vulnerability has been identified in QMS Automotive (All versions \u003c V12.39). The affected application server responds with sensitive information about the server. This could allow an attacker to directly access the database.","status":"published","published":"2023-09-12T09:32:26Z","modified":"2025-02-27T20:55:59Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"high"}],"updated_at":"2026-11-02T20:53:21.01879Z"}],"ghsa":[{"id":"GHSA-p9p5-49xq-6r3q","title":"A vulnerability has been identified in QMS Automotive (All versions \u003c V12.39). The affected...","description":"A vulnerability has been identified in QMS Automotive (All versions \u003c V12.39). The affected application server responds with sensitive information about the server. This could allow an attacker to directly access the database.","status":"published","published":"2023-09-14T18:32:40Z","modified":"2024-04-04T07:40:28Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-550"],"updated_at":"2026-11-02T14:56:53.773376Z"}],"nvd":[{"id":"CVE-2023-40726","description":"A vulnerability has been identified in QMS Automotive (All versions \u003c V12.39). The affected application server responds with sensitive information about the server. This could allow an attacker to directly access the database.","status":"published","published":"2023-09-12T10:15:29.013Z","modified":"2026-06-17T06:19:16.263Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-550"],"updated_at":"2026-11-02T14:08:28.268644Z"}]}}