Fujitsu Software Infrastructure Manager vulnerabilities

2 CVEs affecting Fujitsu Software Infrastructure Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-39903, published 2023-08-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-39379, published 2023-08-04. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Fujitsu Software Infrastructure Manager (ISM) stores sensitive information at the product's maintenance data (ismsnap) in cleartext form. As a result, the password for the proxy server that is…
CVE-2023-39903, published 2023-08-07. Medium severity, CVSS 5.0. EPSS: 0.1% chance of exploitation in the next 30 days. An issue was discovered in Fujitsu Software Infrastructure Manager (ISM) before 2.8.0.061. The ismsnap component (in this specific case at…