What’s Vulnerable › Vulnerabilities

CVE-2023-41137

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-11-09 · updated 2026-06-17
• Weakness: CWE-321

Description

Symmetric encryption used to protect messages between the AppsAnywhere server and client can be broken by reverse engineering the client and used to impersonate the AppsAnywhere server.

Affected products

• AppsAnywhere Client: 1.4.0, 1.4.1, 1.5.1, 1.6.0, 2.0.0, 1.5.2

References

• https://docs.appsanywhere.com/appsanywhere/3.1/2023-11-security-advisory
• https://docs.appsanywhere.com/appsanywhere/3.1/2023-11-security-advisory

Get alerted when CVE-2023-41137 or the next vulnerability affects your stack