# Vulnerabilities published in 2023


- [CVE-2023-21896](https://insights.sbomify.com/CVE-2023-21896/): Privilege escalation in Solaris Operating System (high 7.0)
- [CVE-2023-21894](https://insights.sbomify.com/CVE-2023-21894/): Other in Global Lifecycle Management NextGen OUI Framework (high 7.3)
- [CVE-2023-21893](https://insights.sbomify.com/CVE-2023-21893/): Component takeover in Oracle Data Provider for .NET (high 7.5)
- [CVE-2023-21892](https://insights.sbomify.com/CVE-2023-21892/): Other in Business Intelligence Enterprise Edition (medium 5.4)
- [CVE-2023-21891](https://insights.sbomify.com/CVE-2023-21891/): Other in Business Intelligence Enterprise Edition (medium 5.4)
- [CVE-2023-21890](https://insights.sbomify.com/CVE-2023-21890/): Code injection in Communications Converged Application Server (critical 9.8)
- [CVE-2023-2189](https://insights.sbomify.com/CVE-2023-2189/): Elementor Addons, Widgets and Enhancements – Stax <= 1.4.3 - Missing Authorization in toggle_widget (medium 4.3)
- [CVE-2023-21889](https://insights.sbomify.com/CVE-2023-21889/): Information disclosure in VM VirtualBox (low 3.8)
- [CVE-2023-21888](https://insights.sbomify.com/CVE-2023-21888/): Other in Primavera Gateway (medium 5.4)
- [CVE-2023-21887](https://insights.sbomify.com/CVE-2023-21887/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-21886](https://insights.sbomify.com/CVE-2023-21886/): Code injection in VM VirtualBox (high 8.1)
- [CVE-2023-21885](https://insights.sbomify.com/CVE-2023-21885/): Information disclosure in VM VirtualBox (low 3.8)
- [CVE-2023-21884](https://insights.sbomify.com/CVE-2023-21884/): Denial of service in VM VirtualBox (medium 4.4)
- [CVE-2023-21883](https://insights.sbomify.com/CVE-2023-21883/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-21882](https://insights.sbomify.com/CVE-2023-21882/): Other in MySQL Server (low 2.7)
- [CVE-2023-21881](https://insights.sbomify.com/CVE-2023-21881/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-21880](https://insights.sbomify.com/CVE-2023-21880/): Other in MySQL Server (medium 5.5)
- [CVE-2023-2188](https://insights.sbomify.com/CVE-2023-2188/): Colibri Page Builder <= 1.0.227 - Authenticated (Administrator+) SQL Injection via post_id (high 7.2)
- [CVE-2023-21879](https://insights.sbomify.com/CVE-2023-21879/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-21878](https://insights.sbomify.com/CVE-2023-21878/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-21877](https://insights.sbomify.com/CVE-2023-21877/): Other in MySQL Server (medium 5.5)
- [CVE-2023-21876](https://insights.sbomify.com/CVE-2023-21876/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-21875](https://insights.sbomify.com/CVE-2023-21875/): Other in MySQL Server (medium 5.9)
- [CVE-2023-21874](https://insights.sbomify.com/CVE-2023-21874/): Denial of service in MySQL Server (low 2.7)
- [CVE-2023-21873](https://insights.sbomify.com/CVE-2023-21873/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-21872](https://insights.sbomify.com/CVE-2023-21872/): Other in MySQL Server (medium 5.5)
- [CVE-2023-21871](https://insights.sbomify.com/CVE-2023-21871/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-21870](https://insights.sbomify.com/CVE-2023-21870/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-2187](https://insights.sbomify.com/CVE-2023-2187/): Missing authorization in SCADA Data Gateway (medium 5.3)
- [CVE-2023-21869](https://insights.sbomify.com/CVE-2023-21869/): Other in MySQL Server (medium 5.5)
- [CVE-2023-21868](https://insights.sbomify.com/CVE-2023-21868/): Denial of service in MySQL Server (medium 6.5)
- [CVE-2023-21867](https://insights.sbomify.com/CVE-2023-21867/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-21866](https://insights.sbomify.com/CVE-2023-21866/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-21865](https://insights.sbomify.com/CVE-2023-21865/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-21864](https://insights.sbomify.com/CVE-2023-21864/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-21863](https://insights.sbomify.com/CVE-2023-21863/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-21862](https://insights.sbomify.com/CVE-2023-21862/): XML external entity in Web Services Manager (high 8.1)
- [CVE-2023-21861](https://insights.sbomify.com/CVE-2023-21861/): Other in Business Intelligence Enterprise Edition (medium 5.4)
- [CVE-2023-21860](https://insights.sbomify.com/CVE-2023-21860/): Other in MySQL Cluster (medium 6.3)
- [CVE-2023-2186](https://insights.sbomify.com/CVE-2023-2186/): Memory corruption in SCADA Data Gateway (high 8.2)
- [CVE-2023-21859](https://insights.sbomify.com/CVE-2023-21859/): Other in Access Manager (medium 4.4)
- [CVE-2023-21858](https://insights.sbomify.com/CVE-2023-21858/): Other in Collaborative Planning (high 7.5)
- [CVE-2023-21857](https://insights.sbomify.com/CVE-2023-21857/): Missing authorization in HCM Common Architecture (high 7.5)
- [CVE-2023-21856](https://insights.sbomify.com/CVE-2023-21856/): Missing authorization in iSetup (high 7.5)
- [CVE-2023-21855](https://insights.sbomify.com/CVE-2023-21855/): Missing authorization in Sales for Handhelds (high 7.5)
- [CVE-2023-21854](https://insights.sbomify.com/CVE-2023-21854/): Missing authorization in Sales Offline (high 7.5)
- [CVE-2023-21853](https://insights.sbomify.com/CVE-2023-21853/): Missing authorization in Mobile Field Service (high 7.5)
- [CVE-2023-21852](https://insights.sbomify.com/CVE-2023-21852/): Missing authorization in Learning Management (high 7.5)
- [CVE-2023-21851](https://insights.sbomify.com/CVE-2023-21851/): Missing authorization in Marketing (high 7.5)
- [CVE-2023-21850](https://insights.sbomify.com/CVE-2023-21850/): Missing authorization in Demantra Demand Management (high 7.5)
- [CVE-2023-21849](https://insights.sbomify.com/CVE-2023-21849/): Missing authorization in Applications DBA (high 7.5)
- [CVE-2023-21848](https://insights.sbomify.com/CVE-2023-21848/): Privilege escalation in Communications Convergence (high 8.8)
- [CVE-2023-21847](https://insights.sbomify.com/CVE-2023-21847/): Other in Web Applications Desktop Integrator (medium 5.4)
- [CVE-2023-21846](https://insights.sbomify.com/CVE-2023-21846/): Missing authorization in BI Publisher (formerly XML Publisher) (high 8.8)
- [CVE-2023-21845](https://insights.sbomify.com/CVE-2023-21845/): Other in PeopleSoft Enterprise PT PeopleTools (medium 5.4)
- [CVE-2023-21844](https://insights.sbomify.com/CVE-2023-21844/): Other in PeopleSoft Enterprise PT PeopleTools (medium 5.4)
- [CVE-2023-21843](https://insights.sbomify.com/CVE-2023-21843/): Other in Java SE JDK and JRE (low 3.7)
- [CVE-2023-21842](https://insights.sbomify.com/CVE-2023-21842/): Missing authorization in WebLogic Server (high 7.5)
- [CVE-2023-21841](https://insights.sbomify.com/CVE-2023-21841/): Auth bypass in WebLogic Server (high 7.5)
- [CVE-2023-21840](https://insights.sbomify.com/CVE-2023-21840/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-2184](https://insights.sbomify.com/CVE-2023-2184/): WP Responsive Tabs horizontal vertical and accordion Tabs <= 1.1.15 - Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2023-21839](https://insights.sbomify.com/CVE-2023-21839/): Oracle WebLogic Server Unspecified (high 7.5, exploited in the wild)
- [CVE-2023-21838](https://insights.sbomify.com/CVE-2023-21838/): Denial of service in WebLogic Server (high 7.5)
- [CVE-2023-21837](https://insights.sbomify.com/CVE-2023-21837/): Missing authorization in WebLogic Server (high 7.5)
- [CVE-2023-21836](https://insights.sbomify.com/CVE-2023-21836/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-21835](https://insights.sbomify.com/CVE-2023-21835/): Denial of service in Java SE JDK and JRE (medium 5.3)
- [CVE-2023-21834](https://insights.sbomify.com/CVE-2023-21834/): Other in Self-Service Human Resources (medium 4.3)
- [CVE-2023-21833](https://insights.sbomify.com/CVE-2023-21833/): Information disclosure in Sun ZFS Storage Appliance Kit (AK) Software (medium 4.3)
- [CVE-2023-21832](https://insights.sbomify.com/CVE-2023-21832/): Missing authorization in BI Publisher (formerly XML Publisher) (high 8.8)
- [CVE-2023-21831](https://insights.sbomify.com/CVE-2023-21831/): Information disclosure in PeopleSoft Enterprise CS Academic Advisement (medium 5.3)
- [CVE-2023-21830](https://insights.sbomify.com/CVE-2023-21830/): Deserialization in Java SE JDK and JRE (medium 5.3)
- [CVE-2023-2183](https://insights.sbomify.com/CVE-2023-2183/): Grafana has Broken Access Control in Alert manager: Viewer can send test alerts (medium 4.1)
- [CVE-2023-21829](https://insights.sbomify.com/CVE-2023-21829/): Other in Database - Enterprise Edition (medium 6.3)
- [CVE-2023-21828](https://insights.sbomify.com/CVE-2023-21828/): Missing authorization in Hospitality Reporting and Analytics (high 8.1)
- [CVE-2023-21827](https://insights.sbomify.com/CVE-2023-21827/): Information disclosure in Database - Enterprise Edition (medium 4.3)
- [CVE-2023-21826](https://insights.sbomify.com/CVE-2023-21826/): Other in Hospitality Reporting and Analytics (high 7.6)
- [CVE-2023-21825](https://insights.sbomify.com/CVE-2023-21825/): Information disclosure in iSupplier Portal (medium 5.3)
- [CVE-2023-21824](https://insights.sbomify.com/CVE-2023-21824/): Information disclosure in Communications BRM - Elastic Charging Engine (medium 4.4)
- [CVE-2023-21823](https://insights.sbomify.com/CVE-2023-21823/): Microsoft Windows Graphic Component Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2023-21822](https://insights.sbomify.com/CVE-2023-21822/): Windows Graphics Component Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-21820](https://insights.sbomify.com/CVE-2023-21820/): Windows Distributed File System (DFS) Remote Code Execution Vulnerability (high 7.4)
- [CVE-2023-2182](https://insights.sbomify.com/CVE-2023-2182/): Privilege escalation in GitLab (medium 6.8)
- [CVE-2023-21819](https://insights.sbomify.com/CVE-2023-21819/): Windows Secure Channel Denial of Service Vulnerability (high 7.5)
- [CVE-2023-21818](https://insights.sbomify.com/CVE-2023-21818/): Windows Secure Channel Denial of Service Vulnerability (high 7.5)
- [CVE-2023-21817](https://insights.sbomify.com/CVE-2023-21817/): Windows Kerberos Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-21816](https://insights.sbomify.com/CVE-2023-21816/): Windows Active Directory Domain Services API Denial of Service Vulnerability (high 7.5)
- [CVE-2023-21815](https://insights.sbomify.com/CVE-2023-21815/): Visual Studio Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21813](https://insights.sbomify.com/CVE-2023-21813/): Windows Secure Channel Denial of Service Vulnerability (high 7.5)
- [CVE-2023-21812](https://insights.sbomify.com/CVE-2023-21812/): Windows Common Log File System Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-21811](https://insights.sbomify.com/CVE-2023-21811/): Windows iSCSI Service Denial of Service Vulnerability (high 7.5)
- [CVE-2023-2181](https://insights.sbomify.com/CVE-2023-2181/): Other in GitLab (medium 6.3)
- [CVE-2023-21809](https://insights.sbomify.com/CVE-2023-21809/): Microsoft Defender for Endpoint Security Feature Bypass Vulnerability (high 7.8)
- [CVE-2023-21808](https://insights.sbomify.com/CVE-2023-21808/): .NET and Visual Studio Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21807](https://insights.sbomify.com/CVE-2023-21807/): Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability (medium 6.5)
- [CVE-2023-21806](https://insights.sbomify.com/CVE-2023-21806/): Power BI Report Server Spoofing Vulnerability (high 8.2)
- [CVE-2023-21805](https://insights.sbomify.com/CVE-2023-21805/): Windows MSHTML Platform Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21804](https://insights.sbomify.com/CVE-2023-21804/): Windows Graphics Component Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-21803](https://insights.sbomify.com/CVE-2023-21803/): Windows iSCSI Discovery Service Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-21802](https://insights.sbomify.com/CVE-2023-21802/): Windows Media Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21801](https://insights.sbomify.com/CVE-2023-21801/): Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/394/