« Volver al listado

CVE-2023-51710

Estado: AplazadaMedia (4.2)—

EMS SQL Manager 3.6.2 (compilación 55333) para Oracle permite el secuestro de DLL: un usuario puede desencadenar la ejecución de código arbitrario cada vez que se ejecuta el producto.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

EMS — SQL ManagerAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-51710",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-51710",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-04-30T15:54:52.408790Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.2,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "HIGH",
          "availabilityImpact": "LOW",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 3.4,
        "exploitabilityScore": 0.8
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:oracle:ens_sql_manager:-:*:*:*:*:*:*:*"
          ],
          "vendor": "oracle",
          "product": "ens_sql_manager",
          "versions": [
            {
              "status": "affected",
              "version": "3.6.2 (build 55333)"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-04-29T19:15:19.663",
  "references": [
    {
      "url": "https://excellium-services.com/cert-xlm-advisory/CVE-2023-51710",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://excellium-services.com/cert-xlm-advisory/CVE-2023-51710",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-427"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "EMS SQL Manager 3.6.2 (build 55333) for Oracle allows DLL hijacking: a user can trigger the execution of arbitrary code every time the product is executed."
    },
    {
      "lang": "es",
      "value": "EMS SQL Manager 3.6.2 (compilación 55333) para Oracle permite el secuestro de DLL: un usuario puede desencadenar la ejecución de código arbitrario cada vez que se ejecuta el producto."
    }
  ],
  "lastModified": "2026-06-17T06:41:30.753",
  "sourceIdentifier": "cve@mitre.org"
}