CVE-2023-47298: Ncr Terminal Handler

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue in NCR Terminal Handler 1.5.1 allows a low-level privileged authenticated attacker to query the SOAP API endpoint to obtain information about all of the users of the application including their usernames, roles, security groups and account statuses.

Affected products

• Ncr Terminal Handler: version 1.5.1 only

Published 2025-06-23. Last modified 2026-06-17.