[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fKtJT-nsZzt3QnbXGLZ4BkP56AAk0fI83FVISn_l9aPk":3,"g5a-risk:CVE-2023-28807":115},{"success":4,"data":5,"meta":112},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":41,"epssPercentile":28,"epssTimeSeries":42,"severity":43,"affectedProducts":44,"affectedProductsCount":50,"references":51,"referencesCount":64,"weaknesses":65,"weaknessesCount":50,"isActivelyExploited":74,"cisaInfo":28,"otxData":28,"relatedBlogPosts":75,"seoMetadata":76,"configurations":101,"relatedVendorCves":110,"notableEvents":111},"CVE-2023-28807","What is CVE-2023-28807?","In Zscaler Internet Access (ZIA) a mismatch between Connect Host and Client Hello's Server Name Indication (SNI) enables attackers to evade network security controls by hiding their communications within legitimate traffic.","In Zscaler Internet Access (ZIA) a mismatch between Connect Host and Client Hello's Server Name Indication (SNI) enables attackers to evade network security ...","2024-01-31T20:15:44.903","2026-06-17T05:48:48.877",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":38,"CVSSMetricV2":39,"CVSSMetricV40":40},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":29,"ImpactScore":29},"cve@zscaler.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":24,"BaseScore":26,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.1","CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N","LOCAL","LOW","NONE","UNCHANGED",5.1,"MEDIUM",null,2.5,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":36,"ImpactScore":37},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":34,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":35,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":35,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"NETWORK","HIGH",3.9,3.6,[],[],[],0.00345,[41,41,41,41,41,41,41],"High",[45],{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"zscaler","secure_internet_and_saas_access","*","cpe:2.3:a:zscaler:secure_internet_and_saas_access:*:*:*:*:*:*:*:*",1,[52,57,60,62],{"url":53,"source":54,"tags":55},"https:\u002F\u002Fhelp.zscaler.com\u002Fzia\u002Fconfiguring-advanced-settings#dns-optimization","Zscaler",[56],"Product",{"url":58,"source":54,"tags":59},"https:\u002F\u002Fhelp.zscaler.com\u002Fzia\u002Fconfiguring-advanced-settings#domain-fronting",[56],{"url":53,"source":54,"tags":61},[56],{"url":58,"source":54,"tags":63},[56],4,[66],{"id":67,"name":68,"description":69,"extendedDescription":70,"status":71,"abstraction":72,"structure":73},"CWE-295","Improper Certificate Validation","The product does not validate, or incorrectly validates, a certificate.","When a certificate is invalid or malicious, it might allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. The product might connect to a malicious host while believing it is a trusted host, or the product might be deceived into accepting spoofed data that appears to originate from a trusted host.","Draft","Base","Simple",false,[],{"title":77,"metaDescription":78,"keywords":79,"canonicalUrl":80,"structuredData":81},"What is CVE-2023-28807? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-28807, a high severity cyber security vulnerability from 2024. In Zscaler Internet Access (ZIA) a mismatch between Connect...","CVE-2023-28807, CVE-2023-28807 vulnerability, CVE-2023-28807 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, zscaler security, secure_internet_and_saas_access vulnerability","\u002Fwhat-is\u002Fcve-2023-28807",{"@context":82,"@type":83,"headline":77,"description":78,"datePublished":10,"dateModified":11,"author":84,"publisher":88,"about":92,"mainEntityOfPage":96,"articleSection":99,"keywords":100},"https:\u002F\u002Fschema.org","TechArticle",{"@type":85,"name":86,"url":87},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":85,"name":86,"url":87,"logo":89},{"@type":90,"url":91},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":93,"name":6,"description":94,"additionalType":95},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":97,"@id":98},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-28807","Cybersecurity","CVE-2023-28807, CVE-2023-28807 vulnerability, CVE-2023-28807 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[102],{"Operator":28,"Negate":28,"Nodes":103},[104],{"Operator":105,"Negate":74,"CPEMatch":106},"OR",[107],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":108,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":109,"VersionEndIncluding":28},"4DC095FA-C0CB-4E6F-B749-8DB0308F9C1C","6.2r.290",[],[],{"lastModified":11,"cacheTime":113,"version":114},1792343571018,"2.0",{"score":116,"band":117,"action":118,"scoredAt":119},46,"Medium","Plan remediation","2026-10-16T07:00:40.183998+00:00"]