[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$frFpNoCah37fmMzcHAlxpVfCWf4m8YnnewU3MFYuWVuA":3,"g5a-risk:CVE-2023-28523":123},{"success":4,"data":5,"meta":120},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":36,"epssPercentile":26,"epssTimeSeries":37,"severity":38,"affectedProducts":39,"affectedProductsCount":52,"references":53,"referencesCount":64,"weaknesses":65,"weaknessesCount":64,"isActivelyExploited":79,"cisaInfo":26,"otxData":26,"relatedBlogPosts":80,"seoMetadata":81,"configurations":106,"relatedVendorCves":118,"notableEvents":119},"CVE-2023-28523","What is CVE-2023-28523?","IBM Informix Dynamic Server 12.10 and 14.10 onsmsync is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow an attacker to execute arbitrary code.  IBM X-Force ID:  250753.","IBM Informix Dynamic Server 12.10 and 14.10 onsmsync is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow an attacke...","2023-12-09T03:15:06.92","2023-12-12T21:08:23.727",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":35,"ImpactScore":28},"psirt@us.ibm.com","Secondary",{"Version":20,"VectorString":33,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":34,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",8.4,2.5,0.00286,[36,36,36,36,36,36,36],"High",[40,45,48],{"vendor":41,"product":42,"version":43,"criteria":44,"vulnerable":4},"ibm","informix_dynamic_server","12.10","cpe:2.3:a:ibm:informix_dynamic_server:12.10:-:*:*:-:*:*:*",{"vendor":41,"product":42,"version":46,"criteria":47,"vulnerable":4},"14.10","cpe:2.3:a:ibm:informix_dynamic_server:14.10:*:*:*:*:*:*:*",{"vendor":41,"product":49,"version":50,"criteria":51,"vulnerable":4},"informix_dynamic_server_on_cloud_pak_for_data","*","cpe:2.3:a:ibm:informix_dynamic_server_on_cloud_pak_for_data:*:*:*:*:*:*:*:*",3,[54,60],{"url":55,"source":56,"tags":57},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F250753","Ibmcloud",[58,59],"VDB Entry","Vendor Advisory",{"url":61,"source":62,"tags":63},"https:\u002F\u002Fwww.ibm.com\u002Fsupport\u002Fpages\u002Fnode\u002F7070188","Ibm",[59],2,[66,74],{"id":67,"name":68,"description":69,"extendedDescription":70,"status":71,"abstraction":72,"structure":73},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",{"id":75,"name":76,"description":77,"extendedDescription":70,"status":71,"abstraction":78,"structure":73},"CWE-122","Heap-based Buffer Overflow","A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().","Variant",false,[],{"title":82,"metaDescription":83,"keywords":84,"canonicalUrl":85,"structuredData":86},"What is CVE-2023-28523? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-28523, a high severity cyber security vulnerability from 2023. IBM Informix Dynamic Server 12.10 and 14.10 onsmsync is vul...","CVE-2023-28523, CVE-2023-28523 vulnerability, CVE-2023-28523 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, ibm security, informix_dynamic_server vulnerability, informix_dynamic_server_on_cloud_pak_for_data vulnerability","\u002Fwhat-is\u002Fcve-2023-28523",{"@context":87,"@type":88,"headline":82,"description":83,"datePublished":10,"dateModified":11,"author":89,"publisher":93,"about":97,"mainEntityOfPage":101,"articleSection":104,"keywords":105},"https:\u002F\u002Fschema.org","TechArticle",{"@type":90,"name":91,"url":92},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":90,"name":91,"url":92,"logo":94},{"@type":95,"url":96},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":98,"name":6,"description":99,"additionalType":100},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":102,"@id":103},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-28523","Cybersecurity","CVE-2023-28523, CVE-2023-28523 vulnerability, CVE-2023-28523 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[107],{"Operator":26,"Negate":26,"Nodes":108},[109],{"Operator":110,"Negate":26,"CPEMatch":111},"OR",[112,114,116],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":113,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"0DF4C5FA-F078-4F65-AE4A-3F6DECE5B61A",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":115,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B33D65F4-09CB-4C6C-8D0D-D9EA513F4E07",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":117,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B43736FA-724E-4A8B-95FC-24DC4A94476D",[],[],{"lastModified":11,"cacheTime":121,"version":122},1792358084280,"2.0",{"score":124,"band":125,"action":126,"scoredAt":127},47,"Medium","Plan remediation","2026-10-16T07:00:05.187915+00:00"]