CVE-2023-30223

HIGH 7.5CVE-2023-30223 · Published 16/06/2023 · updated 17/06/2026

In short

CVE-2023-30223 is a HIGH (CVSS 7.5) vulnerability affecting server (4d).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 66.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
server 4d	`= 17= 18= 19`	No fix yet

Description

A broken authentication vulnerability in 4D SAS 4D Server software v17, v18, v19 R7, and earlier allows attackers to send crafted TCP packets containing requests to perform arbitrary actions.

References

blog.4d.com/security-bulletin-two-cves-and-how-to-stay-secure
packetstormsecurity.com · Not Applicable
infigo.is/en/insights/42/information-disclosure-and-broken-authentication-in-4d-sas-4d-server · Exploit

More vulnerabilities in server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free