{"cve":"CVE-2023-23397","epss":{"score":0.97159},"kev":{"dateAdded":"2023-03-14T00:00:00+00:00","dueDate":"2023-04-04T00:00:00+00:00"},"mitre":{"cpes":["cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*","cpe:2.3:a:microsoft:office:*:*:*:*:*:*:*:*","cpe:2.3:a:microsoft:office_long_term_servicing_channel:*:*:*:*:*:*:*:*","cpe:2.3:a:microsoft:outlook:*:*:*:*:*:*:x64:*","cpe:2.3:a:microsoft:outlook:*:*:*:*:*:x86:*:*"],"created":"2023-03-14T16:55:28.168000+00:00","description":"Microsoft Outlook Elevation of Privilege Vulnerability","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C"},"cvssV4_0":{}},"mitre_repo_path":"cves/2023/23xxx/CVE-2023-23397.json","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23397"],"title":"Microsoft Outlook Elevation of Privilege Vulnerability","updated":"2025-10-21T23:15:23.783000+00:00","vendors":["microsoft","microsoft$PRODUCT$365_apps","microsoft$PRODUCT$office","microsoft$PRODUCT$office_long_term_servicing_channel","microsoft$PRODUCT$outlook"],"weaknesses":["CWE-20"]},"nvd":{"cpes":["cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*","cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*","cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:*:*:*","cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:-:*:*:*","cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:rt:*:*:*","cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:*:*:*"],"created":"2023-03-14T17:15:13.263000+00:00","description":"Microsoft Outlook Elevation of Privilege Vulnerability","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cvssV4_0":{}},"nvd_repo_path":"2023/CVE-2023-23397.json","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23397","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-23397"],"title":null,"updated":"2026-06-17T05:37:01.380000+00:00","vendors":["microsoft","microsoft$PRODUCT$365_apps","microsoft$PRODUCT$office","microsoft$PRODUCT$office_long_term_servicing_channel","microsoft$PRODUCT$outlook"],"weaknesses":["CWE-20","CWE-294"]},"opencve":{"changes":[{"created":"2024-08-14T20:30:00+00:00","data":[{"details":{"added":["cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:-:*:*:*"],"removed":["cpe:2.3:a:microsoft:office:2021:*:*:*:ltsc:*:*:*","cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:*:*:*:*"]},"type":"cpes"}],"id":"b4b58bfd-fc67-4cea-b0ad-cc491e193e4d"},{"created":"2025-01-01T01:15:00+00:00","data":[{"details":{"added":[],"removed":["cpe:2.3:a:microsoft:outlook:2013:*:*:*:*:*:x64:*","cpe:2.3:a:microsoft:outlook:2013:*:*:*:*:x86:*:*","cpe:2.3:a:microsoft:outlook:2013:*:*:*:rt:*:*:*","cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:x64:*:*","cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:x86:*:*"]},"type":"cpes"}],"id":"9691b037-ed1f-46e8-b7df-b194ae3dce46"},{"created":"2025-02-04T19:15:00+00:00","data":[{"details":{"added":{"kev":{"dateAdded":"2023-03-14"},"ssvc":{"options":{"Automatable":"no","Exploitation":"active","Technical Impact":"total"},"version":"2.0.3"}},"removed":{},"updated":{}},"type":"metrics"}],"id":"07bf84f4-1ba2-4242-bdaf-b851a159ff0f"},{"created":"2025-07-15T13:45:00+00:00","data":[{"details":{"added":{},"removed":{},"updated":{"epss":{"new":{"score":0.93609},"old":{"score":0.93589}}}},"type":"metrics"}],"id":"feb8e9a0-a67a-4eb8-806e-7da08435e927"},{"created":"2025-07-16T13:45:00+00:00","data":[{"details":{"added":{},"removed":{},"updated":{"epss":{"new":{"score":0.93584},"old":{"score":0.93609}}}},"type":"metrics"}],"id":"f517b239-c140-490f-a1b1-ebb16ba2f553"},{"created":"2025-10-21T19:30:00+00:00","data":[{"details":{"added":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-23397"],"removed":[]},"type":"references"}],"id":"20a7d8f8-e6f2-4ba2-8f1e-ba6cc48ab203"},{"created":"2025-10-21T20:30:00+00:00","data":[{"details":{"added":[],"removed":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-23397"]},"type":"references"}],"id":"b26861e4-ed35-42a6-a5e4-a0a72ba44030"},{"created":"2025-10-22T00:15:00+00:00","data":[{"details":{"added":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-23397"],"removed":[]},"type":"references"}],"id":"e847a913-c9bb-4f74-b225-ceb13fc1caef"},{"created":"2026-02-25T16:45:00+00:00","data":[{"details":{"added":["cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*","cpe:2.3:a:microsoft:office:*:*:*:*:*:*:*:*","cpe:2.3:a:microsoft:office_long_term_servicing_channel:*:*:*:*:*:*:*:*","cpe:2.3:a:microsoft:outlook:*:*:*:*:*:*:x64:*","cpe:2.3:a:microsoft:outlook:*:*:*:*:*:x86:*:*"],"removed":[]},"type":"cpes"}],"id":"4309dd0a-c97a-42b3-878c-7fc99e7fac20"}],"cpes":{"data":["cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*","cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*","cpe:2.3:a:microsoft:office:*:*:*:*:*:*:*:*","cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*","cpe:2.3:a:microsoft:office_long_term_servicing_channel:*:*:*:*:*:*:*:*","cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:*:*:*","cpe:2.3:a:microsoft:outlook:*:*:*:*:*:*:x64:*","cpe:2.3:a:microsoft:outlook:*:*:*:*:*:x86:*:*","cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:-:*:*:*","cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:rt:*:*:*","cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:*:*:*"],"providers":["mitre","nvd"]},"created":{"data":"2023-03-14T16:55:28.168000+00:00","provider":"mitre"},"description":{"data":"Microsoft Outlook Elevation of Privilege Vulnerability","provider":"mitre"},"metrics":{"cvssV2_0":{"data":{},"provider":null},"cvssV3_0":{"data":{},"provider":null},"cvssV3_1":{"data":{"score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C"},"provider":"mitre"},"cvssV4_0":{"data":{},"provider":null},"epss":{"data":{"score":0.97159},"provider":"first"},"kev":{"data":{"dateAdded":"2023-03-14T00:00:00+00:00","dueDate":"2023-04-04T00:00:00+00:00"},"provider":"cisa"},"ssvc":{"data":{"options":{"Automatable":"no","Exploitation":"active","Technical Impact":"total"},"version":"2.0.3"},"provider":"vulnrichment"},"threat_severity":{"data":null,"provider":null}},"references":{"data":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23397","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-23397"],"providers":["mitre","nvd","vulnrichment"]},"title":{"data":"Microsoft Outlook Elevation of Privilege Vulnerability","provider":"mitre"},"updated":{"data":"2025-10-27T17:14:31.953000+00:00","provider":"nvd"},"vendors":{"data":["microsoft","microsoft$PRODUCT$365_apps","microsoft$PRODUCT$office","microsoft$PRODUCT$office_long_term_servicing_channel","microsoft$PRODUCT$outlook"],"providers":["mitre","nvd"]},"weaknesses":{"data":["CWE-20","CWE-294"],"providers":["mitre","nvd"]}},"vulnrichment":{"cpes":[],"created":"2023-03-14T16:55:28.168000+00:00","description":"Microsoft Outlook Elevation of Privilege Vulnerability","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{},"cvssV4_0":{},"kev":{"dateAdded":"2023-03-14"},"ssvc":{"options":{"Automatable":"no","Exploitation":"active","Technical Impact":"total"},"version":"2.0.3"}},"references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-23397"],"title":"Microsoft Outlook Elevation of Privilege Vulnerability","updated":"2025-02-04T18:34:19.807000+00:00","vendors":[],"vulnrichment_repo_path":"2023/23xxx/CVE-2023-23397.json","weaknesses":[]}}