s2
--:--:--UTC

Searching APEX

Starting…

  1. Searching Threats, IOCs & Threat Intelligence locally
  2. Querying external providers
  3. Asking AI Forensic Validator
  4. Creating new entry from validated hit

0s elapsed

CVE-2023-22525

📛 CVE Title

CVE-2023-22525

Description

No English description in the CVE record.

Overview

State
REJECTED
Assigner (CNA)
atlassian
CVSS severity
CVSS score
CVSS vector
Effective score
no score available from CNA, NVD, or AI yet
CWE(s)
Reserved
2023-01-01
Published
Last updated
2024-01-16 18:32 UTC
Source
https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/22xxx/CVE-2023-22525.json

NVD / KEV / EPSS data refreshed 2026-06-29 05:46 UTC. Re-run the 🛰 Backfill from NVD button above to refresh.

AI-forensic CVSS estimate

Used only when a CVE has no official CVSS from its CNA or NVD. An LLM estimates the v3.1 base score from the description; a HIGH/CRITICAL estimate promotes the CVE to a Threat.

AI could not derive a confident score from this record (likely RESERVED / REJECTED or too sparse).

Vendor references (0)

References embedded in the original CVE record by the assigning CNA.

None in the CVE record.

Web references (0)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

No web references attached yet.

Remediations (10)

  • web:arstechnica.com

    Found in the wild: 2 Secure Boot exploits. Microsoft is patching only 1 of them. The publicly available exploits provide a near-universal way to bypass key protections.

    2026-05-22 21:47 UTC
  • web:krebsonsecurity.com

    Microsoft Corp. today issued security updates to fix more than 80 vulnerabilities in its Windows operating systems and software. There are no known "zero-day" or actively exploited vulnerabilities ...

    2026-05-22 21:47 UTC
  • web:msrc.microsoft.com

    The Microsoft Security Response Center (MSRC) investigates all reports of security vulnerabilities affecting Microsoft products and services, and provides the information here as part of the ongoing effort to help you manage security risks and help keep your systems protected.

    2026-05-22 21:47 UTC
  • web:support.esri.com

    Refer to the Issues Addressed with this Patch section for details about BUG-000171492. The new patch when shown as available in the ArcGIS Enterprise Patch Notification tool, is listed as ArcGIS Server Security 2025 Update 1 Patch with a release date of April 17, 2025; once installed, it is listed as ArcGIS Server Security 2025 Update 1 Patch B.

    2026-05-22 21:47 UTC
  • web:support.servicenow.com

    Overview The advisories below document publicly disclosed Common Vulnerabilities and Exposures ( CVEs ) in the Now Platform by ServiceNow. Because ServiceNow uses various methods to communicate vulnerability information, patches, and other fixes, customers should review family, security patch , and hotfix release notes, which are available at https://docs.servicenow.com, for a complete list of ...

    2026-05-22 21:47 UTC
  • web:www.bleepingcomputer.com

    CISA has ordered U.S. federal agencies to patch a Microsoft Defender privilege escalation flaw (dubbed BlueHammer) that has been exploited in zero-day attacks.

    2026-05-22 21:47 UTC
  • web:www.cisa.gov

    Updated October 29, 2025: CISA has updated this Alert to include revised information on vulnerable product identification, potential threat activity detections, and additional resources. Microsoft released an update to address a critical remote code execution vulnerability impacting Windows Server Update Service (WSUS) in Windows Server (2012, 2016, 2019, 2022, and 2025), CVE -2025-59287

    2026-05-22 21:47 UTC
  • web:www.computerworld.com

    Each month, the team at Readiness analyzes the latest Patch Tuesday updates from Microsoft and provides detailed, actionable testing guidance. The company's Patch Tuesday release for February ...

    2026-05-22 21:47 UTC
  • web:www.oracle.com

    This Critical Patch Update contains 374 new security patches across the product families listed below. Please note that an MOS note summarizing the content of this Critical Patch Update and other Oracle Software Security Assurance activities is located at October 2025 Critical Patch Update: Executive Summary and Analysis.

    2026-05-22 21:47 UTC
  • web:www.ultimatewindowssecurity.com

    How to Detect Pass-the-Hash Attacks Blog Series Come meet Randy in Orlando at Microsoft Ignite at Quest's Booth #1818 Detecting Pass-the-Hash with Honeypots Catch Malware Hiding in WMI with Sysmon For of all sad words of tongue or pen, the saddest are these: 'We weren't logging' Experimenting with Windows Security: Controls for Enforcing Policies Sysmon Event IDs 1, 6, 7 Report All the ...

    2026-05-22 21:47 UTC

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.

Raw JSON

The full cvelistV5 record. Download as CVE-2023-22525.json.

{
  "containers": {
    "cna": {
      "providerMetadata": {
        "dateUpdated": "2024-01-16T17:32:11.704Z",
        "orgId": "f08a6ab8-ed46-4c22-8884-d911ccfe3c66",
        "shortName": "atlassian"
      },
      "rejectedReasons": [
        {
          "lang": "en-US",
          "value": "To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used."
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f08a6ab8-ed46-4c22-8884-d911ccfe3c66",
    "assignerShortName": "atlassian",
    "cveId": "CVE-2023-22525",
    "dateRejected": "2024-01-16T17:32:11.704Z",
    "dateReserved": "2023-01-01T00:01:22.333Z",
    "dateUpdated": "2024-01-16T17:32:11.704Z",
    "state": "REJECTED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.0"
}