Critical severity9.8NVD Advisory· Published Mar 8, 2023· Updated Jun 17, 2026

CVE-2023-22889

Description

SmartBear Zephyr Enterprise through 7.15.0 mishandles user-defined input during report generation. This could lead to remote code execution by unauthenticated users.

Affected products

SmartBear/Zephyr Enterprisedescription
Smartbear/Zephyr Enterprisellm-fuzzy
Range: <=7.15.0

Patches

Vulnerability mechanics

References

smartbear.com/security/cve/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000