Is CVE-2023-43900 actively exploited?

No active exploitation of CVE-2023-43900 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2023-43900 be exploited remotely?

Yes. CVE-2023-43900 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2023-43900?

CVE-2023-43900 has a CVSS score of 6.5 (MEDIUM).

HOME VULNERABILITIESCVE-2023-43900

MEDIUM

CVE-2023-43900

CWE-639Published: November 14, 2023· Updated: Jun 17, 2026

6.5

CVSS v3.1

Official Description

Insecure Direct Object References (IDOR) in EMSigner v2.8.7 allow attackers to gain unauthorized access to application content and view sensitive data of other users via manipulation of the documentID and EncryptedDocumentId parameters.

NVD Source

Technical Analysis

CVE-2023-43900 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), with a CVSS base score of 6.5.