CVE DatabaseCVE-2023-47246

Updated 2026-07-31한국어 권고문 →

CVE-2023-472469.8/CRITICALCISA KEVCWE-22CWE-22

CVE-2023-47246 Technical Vulnerability Analysis & Patch Advisory (CVSS 9.8)

⚡ Jump to Patch

Affected Vendors

security-advisory

Affected Components

enterprise-software

Published Date

2023-11-10

CVSS v3.1

9.8

CRITICAL

EPSS (30d)

98.9%

FIRST.org

CISA KEV

Exploited

NVD Source ↗

Executive & SecOps Summary

SECOPS ASSESSMENT

Affected Scope

Systems running unpatched versions impacted by CVE-2023-47246

Impact

In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat we...

Mitigation

Apply vendor security patches and restrict external network exposure.

Affected Products & Version Scope

All unpatched versions listed in the official NVD CPE configurations

Remediation & Live Workaround Commands

PATCH & WORKAROUND

Remediation Steps

Upgrade to the latest patched release from the vendor.
Apply virtual patching or network segmentation until maintenance windows allow full patching.

Interactive SecOps Remediation Checklist

0/4 (0%)

Recommended Security Control & Mitigation Partner

Cloudflare Enterprise & Pro WAF

Reduce your attack surface immediately with automated vulnerability scanning and runtime protection.

Block Exploits Instantly with Managed Virtual Patching Rules

Can't patch production immediately? Deploy managed WAF rules at the edge to intercept RCE, SQLi, and deserialization payloads before they hit your origin server.

3-min setup · Automated Zero-Day Managed Rules

Deploy Instant WAF Protection Free

Practice Exploiting & Patching This Web Vulnerability in an Interactive Lab

Launch Hands-On Security Lab

Technical Root Cause & Exploitation Mechanics

Technical Overview

In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat webroot, as exploited in the wild in November 2023.

CVSS Score: 9.8 (CRITICAL)
CWE IDs: CWE-22, CWE-22

Official Vendor Advisories & References

NVD Original English Description

In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat webroot, as exploited in the wild in November 2023.

https://documentation.sysaid.com/docs/latest-version-installation-files

Source: cve@mitre.org · Product

https://documentation.sysaid.com/docs/on-premise-security-enhancements-2023

Source: cve@mitre.org · Release Notes, Vendor Advisory

https://www.sysaid.com/blog/service-desk/on-premise-software-security-vulnerability-notification

Source: cve@mitre.org · Exploit, Vendor Advisory

https://documentation.sysaid.com/docs/latest-version-installation-files

Source: af854a3a-2127-422b-91ae-364da2661108 · Product

https://documentation.sysaid.com/docs/on-premise-security-enhancements-2023

Source: af854a3a-2127-422b-91ae-364da2661108 · Release Notes, Vendor Advisory

https://www.sysaid.com/blog/service-desk/on-premise-software-security-vulnerability-notification

Source: af854a3a-2127-422b-91ae-364da2661108 · Exploit, Vendor Advisory

Frequently Asked SecOps Questions (CVE-2023-47246)

FAQ

Q1. How critical is CVE-2023-47246 and is it actively exploited in the wild?

CVE-2023-47246 is rated CVSS 9.8 (CRITICAL) with a 30-day EPSS exploitation probability of 98.9%. It is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, requiring immediate emergency remediation.

Q2. Which vendors and products are affected by CVE-2023-47246?

Primary impacted vendors include security-advisory across enterprise-software. Scope summary: All unpatched versions listed in the official NVD CPE configurations

Q3. What temporary mitigations or workarounds exist for CVE-2023-47246 before patching?

[Mitigation] Apply vendor security patches and restrict external network exposure. Follow the CLI remediation commands and interactive SecOps checklist on this page to restrict exposure prior to your maintenance window.

SECOPS WORKBENCH INTEGRATION