CVE-2023-40266

CRITICAL 9.8CVE-2023-40266 · Published 08/02/2024 · updated 17/06/2026

In short

CVE-2023-40266 is a CRITICAL (CVSS 9.8) vulnerability affecting unify openscape xpressions webassistant (mitel).
Chance of exploitation in the next 30 days (EPSS): 0.70%, higher than 53.3% of all vulnerabilities.
Fix: update to 7r1_fr5_hf42_p911 or later.

Package	Affected versions	Patched versions
unify openscape xpressions webassistant mitel	`≥ 7.0, < 7r1_fr5_hf42_p911`	`7r1_fr5_hf42_p911`

An issue was discovered in Atos Unify OpenScape Xpressions WebAssistant V7 before V7R1 FR5 HF42 P911. It allows path traversal.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.