CVE-2023-47256

Description

References

• web.archive.org/web/20240208140218/https://gotham-security.com/screenconnect-cve-2023-47256
• connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.8-security-fix · Vendor Advisory

More vulnerabilities in screenconnect

• CVE-2026-84869CRITICAL 9.9EXPLOITED (CISA KEV)A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorizatio…
• CVE-2026-11596MEDIUM 4.7In ScreenConnect™ versions prior to 26.2, input validation within the Host Pass creation functionality could allow an authenticated user wit…
• CVE-2025-14823MEDIUM 5.3In deployments using the ScreenConnect™ Certificate Signing Extension, encrypted configuration values including an Azure Key Vault-related k…
• CVE-2025-14265CRITICAL 9.1In versions of ScreenConnect™ prior to 25.8, server-side validation and integrity checks within the extension subsystem could allow the inst…
• CVE-2025-3935HIGH 7.2EXPLOITED (CISA KEV)ScreenConnect versions 25.2.3 and earlier versions may be susceptible to a ViewState code injection attack. ASP.NET Web Forms use ViewState …