{"id":"CVE-2023-5913","aliases":["EUVD-2023-58186","GHSA-m86c-6g87-95pq"],"status":"published","title":"A potential Privilege Escalation vulnerability in opentext Fortify ScanCentral DAST API.","description":"Incorrect Privilege Assignment vulnerability in opentext Fortify ScanCentral DAST. The vulnerability could be exploited to gain elevated privileges.This issue affects Fortify ScanCentral DAST versions 21.1, 21.2, 21.2.1, 22.1, 22.1.1, 22.2, 23.1.","severity":{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00681,"percentile":0.52702,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-266"],"published":"2023-11-08T16:42:31Z","modified":"2026-06-17T06:49:38Z","products":[{"vendor":"microfocus","product":"fortify_scancentral_dast"},{"vendor":"opentext","product":"fortify scancentral dast"}],"references":[{"url":"https://portal.microfocus.com/s/article/KM000023500?language=en_US","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5913"},{"url":"https://github.com/advisories/GHSA-m86c-6g87-95pq"}],"sources":{"cve":[{"id":"CVE-2023-5913","title":"A potential Privilege Escalation vulnerability in opentext Fortify ScanCentral DAST API.","description":"Incorrect Privilege Assignment vulnerability in opentext Fortify ScanCentral DAST. The vulnerability could be exploited to gain elevated privileges.This issue affects Fortify ScanCentral DAST versions 21.1, 21.2, 21.2.1, 22.1, 22.1.1, 22.2, 23.1.\n\n","status":"published","published":"2023-11-08T16:42:31.074Z","modified":"2024-09-04T13:53:22.231Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-266","CWE-266"],"updated_at":"2026-11-02T14:35:17.48054Z"}],"euvd":[{"id":"EUVD-2023-58186","description":"Incorrect Privilege Assignment vulnerability in opentext Fortify ScanCentral DAST. The vulnerability could be exploited to gain elevated privileges.This issue affects Fortify ScanCentral DAST versions 21.1, 21.2, 21.2.1, 22.1, 22.1.1, 22.2, 23.1.\n\n","status":"published","published":"2023-11-08T16:42:31Z","modified":"2024-09-04T13:53:22Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","level":"high"}],"updated_at":"2026-11-03T00:56:04.589959Z"}],"ghsa":[{"id":"GHSA-m86c-6g87-95pq","title":"Incorrect Privilege Assignment vulnerability in opentext Fortify ScanCentral DAST. The...","description":"Incorrect Privilege Assignment vulnerability in opentext Fortify ScanCentral DAST. The vulnerability could be exploited to gain elevated privileges.This issue affects Fortify ScanCentral DAST versions 21.1, 21.2, 21.2.1, 22.1, 22.1.1, 22.2, 23.1.\n\n","status":"published","published":"2023-11-08T18:30:31Z","modified":"2023-11-08T18:30:37Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","level":"high"}],"cwes":["CWE-266"],"updated_at":"2026-11-02T14:54:55.524004Z"}],"nvd":[{"id":"CVE-2023-5913","description":"Incorrect Privilege Assignment vulnerability in opentext Fortify ScanCentral DAST. The vulnerability could be exploited to gain elevated privileges.This issue affects Fortify ScanCentral DAST versions 21.1, 21.2, 21.2.1, 22.1, 22.1.1, 22.2, 23.1.\n\n","status":"published","published":"2023-11-08T17:15:08.193Z","modified":"2026-06-17T06:49:38.84Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","level":"high","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-266"],"updated_at":"2026-11-02T14:08:43.669554Z"}]}}