CVE-2023-23903: Nozominetworks Cmc

Medium severity, CVSS 4.9. EPSS: 0.6% chance of exploitation in the next 30 days.

An authenticated administrator can upload a SAML configuration file with the wrong format, with the application not checking the correct file format. Every subsequent application request will return an error. The whole application in rendered unusable until a console intervention.

Affected products

• Nozominetworks Cmc: before 22.6.2 (fixed in 22.6.2)
• Nozominetworks Guardian: before 22.6.2 (fixed in 22.6.2)

Published 2023-08-09. Last modified 2026-06-17.