{"id":"CVE-2023-5516","state":"PUBLISHED","title":"CVE-2023-5516","description":"\nPoorly constructed webap requests and URI components with special characters trigger unhandled errors and exceptions, disclosing\ninformation about the underlying technology and other sensitive information details. The website unintentionally reveals sensitive information including technical details like version Info, endpoints,\nbackend server, Internal IP. etc., which can potentially expose additional attack surface containing other interesting vulnerabilities. \n\n","publishedAt":"2023-11-01T02:54:21.225Z","updatedAt":"2025-02-27T20:36:39.830Z","severity":{"score":5.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","source":"Hitachi Energy"},"assigner":"Hitachi Energy","products":["Hitachi Energy eSOMS"],"affected":[{"vendor":"Hitachi Energy","product":"eSOMS","defaultStatus":"unaffected","versions":[{"version":"6.0","status":"affected","lessThanOrEqual":"6.3.13","versionType":"custom"}]}],"references":["https://publisher.hitachienergy.com/preview?DocumentId=8DBD000175&languageCode=en&Preview=true"],"weaknesses":["CWE-200"],"ingestedAt":"2026-10-29T20:06:42.242Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/5xxx/CVE-2023-5516.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-5516","state":"PUBLISHED","datePublished":"2023-11-01T02:54:21.225Z","dateUpdated":"2025-02-27T20:36:39.830Z","assignerShortName":"Hitachi Energy","assignerOrgId":"e383dce4-0c27-4495-91c4-0db157728d17","dateReserved":"2023-10-11T01:30:14.840Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"\nPoorly constructed webap requests and URI components with special characters trigger unhandled errors and exceptions, disclosing\ninformation about the underlying technology and other sensitive information details. The website unintentionally reveals sensitive information including technical details like version Info, endpoints,\nbackend server, Internal IP. etc., which can potentially expose additional attack surface containing other interesting vulnerabilities. \n\n"}],"affected":[{"vendor":"Hitachi Energy","product":"eSOMS","defaultStatus":"unaffected","versions":[{"version":"6.0","status":"affected","lessThanOrEqual":"6.3.13","versionType":"custom"}]}],"references":[{"url":"https://publisher.hitachienergy.com/preview?DocumentId=8DBD000175&languageCode=en&Preview=true"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-200","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"Hitachi Energy","orgId":"e383dce4-0c27-4495-91c4-0db157728d17","dateUpdated":"2023-11-01T02:54:21.225Z"},"impacts":[{"capecId":"CAPEC-410","descriptions":[{"lang":"en","value":"CAPEC-410 Information Elicitation"}]}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://publisher.hitachienergy.com/preview?DocumentId=8DBD000175&languageCode=en&Preview=true","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T07:59:44.747Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-02-26T21:49:51.563697Z","id":"CVE-2023-5516","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-02-27T20:36:39.830Z"}}]}}}