CVE coverage
View on NVD →
CVE-2023-47246
CVSS 9.8
Actively exploited (KEV)
2 detections found
In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat webroot, as exploited in the wild in November 2023.
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| sigma | Lace Tempest PowerShell Evidence Eraser | test | 2023-11-09 |
| sigma | Lace Tempest PowerShell Launcher | test | 2023-11-09 |