What’s Vulnerable › Vulnerabilities

CVE-2023-6400: Incorrect user authorization vulnerability on OpenText ZENworks Configuration Management (ZCM) product.

• Severity: high (CVSS 7.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-03-27 · updated 2026-06-17
• Weakness: CWE-863

Description

Incorrect Authorization vulnerability in OpenText™ ZENworks Configuration Management (ZCM) allows Unauthorized Use of Device Resources.This issue affects ZENworks Configuration Management (ZCM) versions: 2020 update 3, 23.3, and 23.4.

Affected products

• Microfocus Zenworks Configuration Management: 2020_update3, 23.3, 23.4

References

• https://portal.microfocus.com/s/article/KM000027630?language=en_US
• https://portal.microfocus.com/s/article/KM000027630?language=en_US

Get alerted when CVE-2023-6400 or the next vulnerability affects your stack