https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-41099.htmlhttps://patchthecve.com/cve/CVE-2023-41099.htmlWed, 17 Jun 2026 06:20:34 +0000HIGH 7.8: In the Windows installer in Atos Eviden CardOS API before 5.5.5.2811, Local Privilege Escalation can occur.(from a regular user to SYSTEM).https://patchthecve.com/cve/CVE-2023-6269.htmlhttps://patchthecve.com/cve/CVE-2023-6269.htmlWed, 17 Jun 2026 06:50:25 +0000CRITICAL 10.0: An argument injection vulnerability has been identified in the administrative web interface of the Atos Unify OpenScape products "Session Border Controller" (SBC) and "Branch", before version V10 R3.4.0, and OpenScape "BCF" before versions V10R10.12.00 and V10R11.05.02. This allows an unauthenticahttps://patchthecve.com/cve/CVE-2023-45356.htmlhttps://patchthecve.com/cve/CVE-2023-45356.htmlWed, 17 Jun 2026 06:28:40 +0000HIGH 8.8: Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 4000 and Manager Platform V10 R1 before Hotfix V10 R1.42.2 allow command injection by an authenticated attacker into the platform operating system, leading to administrative access, via dtb pages of the platform portal. This is alsohttps://patchthecve.com/cve/CVE-2023-45355.htmlhttps://patchthecve.com/cve/CVE-2023-45355.htmlWed, 17 Jun 2026 06:28:40 +0000HIGH 8.8: Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 and 4000 and Manager Platform V10 R1 before Hotfix V10 R1.42.2 allow command injection by an authenticated attacker into the platform operating system, leading to administrative access via the webservice. This is also known as OSFOUhttps://patchthecve.com/cve/CVE-2023-45354.htmlhttps://patchthecve.com/cve/CVE-2023-45354.htmlWed, 17 Jun 2026 06:28:40 +0000HIGH 8.8: Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated remote attacker to execute arbitrary code on the operating system by using the Common Management Portal web interface. This is also known as OCMP-6589.https://patchthecve.com/cve/CVE-2023-45353.htmlhttps://patchthecve.com/cve/CVE-2023-45353.htmlWed, 17 Jun 2026 06:28:40 +0000HIGH 8.8: Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated attacker to execute arbitrary code on the operating system by leveraging the Common Management Portal web interface for Authenticated remote upload and creation of arbitrary files affecting thhttps://patchthecve.com/cve/CVE-2023-45352.htmlhttps://patchthecve.com/cve/CVE-2023-45352.htmlWed, 17 Jun 2026 06:28:40 +0000HIGH 8.8: Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated attacker to execute arbitrary code on the operating system via a Common Management Portal web interface Path traversal vulnerability allowing write access outside the intended folders. This ishttps://patchthecve.com/cve/CVE-2023-45351.htmlhttps://patchthecve.com/cve/CVE-2023-45351.htmlWed, 17 Jun 2026 06:28:40 +0000HIGH 8.8: Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.1, 4000 Assistant V10 R0, 4000 Manager V10 R1 before V10 R1.42.1, and 4000 Manager V10 R0 allow Authenticated Command Injection via AShbr. This is also known as OSFOURK-24039.https://patchthecve.com/cve/CVE-2023-45350.htmlhttps://patchthecve.com/cve/CVE-2023-45350.htmlWed, 17 Jun 2026 06:28:40 +0000HIGH 8.8: Atos Unify OpenScape 4000 Manager V10 R1 before V10 R1.42.1 and 4000 Manager V10 R0 allow Privilege escalation that may lead to the ability of an authenticated attacker to run arbitrary code via AScm. This is also known as OSFOURK-24034.https://patchthecve.com/cve/CVE-2023-45349.htmlhttps://patchthecve.com/cve/CVE-2023-45349.htmlWed, 17 Jun 2026 06:28:39 +0000HIGH 7.5: Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.34.7, 4000 Assistant V10 R1.42.0, 4000 Assistant V10 R0, 4000 Manager V10 R1 before V10 R1.34.7, 4000 Manager V10 R1.42.0, and 4000 Manager V10 R0 expose sensitive information that may allow lateral movement to the backup system via AShbr. Thihttps://patchthecve.com/cve/CVE-2023-35035.htmlhttps://patchthecve.com/cve/CVE-2023-35035.htmlWed, 17 Jun 2026 06:04:18 +0000HIGH 8.8: Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8, and Manager V10 R0 allow command injection by authenticated users, aka OSFOURK-23557.https://patchthecve.com/cve/CVE-2023-35034.htmlhttps://patchthecve.com/cve/CVE-2023-35034.htmlWed, 17 Jun 2026 06:04:18 +0000CRITICAL 9.8: Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow remote code execution by unauthenticated users, aka OSFOURK-24033.https://patchthecve.com/cve/CVE-2023-35033.htmlhttps://patchthecve.com/cve/CVE-2023-35033.htmlWed, 17 Jun 2026 06:04:18 +0000HIGH 8.8: Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8, and Manager V10 R0 allow command injection by authenticated users, aka OSFOURK-23556.https://patchthecve.com/cve/CVE-2023-35032.htmlhttps://patchthecve.com/cve/CVE-2023-35032.htmlWed, 17 Jun 2026 06:04:18 +0000HIGH 8.8: Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow command injection by authenticated users, aka OSFOURK-23554.https://patchthecve.com/cve/CVE-2023-35031.htmlhttps://patchthecve.com/cve/CVE-2023-35031.htmlWed, 17 Jun 2026 06:04:17 +0000HIGH 8.8: Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8, and Manager V10 R0 allow command injection by authenticated users, aka OSFOURK-24036.