CVE-2023-35887

mediumpriority · track · 27EPSS 0.013 · 70 %ileexploit · PoCDEEUNLRUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

1 exploit · PoC

Likely / severe?

1.31% (70th) EPSS

CVSS 4.3 · medium

Is it mine?

16 products

Check your exposure

Who says so?

7 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-22

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA. In SFTP servers implemented using Apache MINA SSHD that use a RootedFileSystem, logged users may be able to discover "exists/does not exist" information about items outside the rooted tree via paths including parent navigation ("..") beyond the root, or involving symlinks. This issue affects Apache MINA: from 1.0 before 2.10. Users are recommended to upgrade to 2.10

cvss

Technical severity, 0–10. One row per scoring source.

5.0

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.14.3mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:Nprimary · NVD / NIST USexploitability 2.8 · impact 1.4

v3.15mediumAV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:Nsecondary · FSTEC (BDU) RU

v3.15mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:Nsecondary · ENISA EU

v3.15mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:Nsecondary · security@apache.orgexploitability 3.1 · impact 1.4

v3.15mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:Nsecondary · OSV

v3.14.1mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:Psecondary · CVSS-BT (t0sche)

v3.14.3mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:Nsecondary · NCSC-NL NL

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-200USCWE-22USCWE-22USCWE-22USCWE-24US

exploits (1)

Public proof-of-concept and weaponised exploit code.

shoucheng3/apache__mina-sshd_CVE-2023-35887_2-9-2shoucheng3/apache__mina-sshd_CVE-2023-35887_2-9-2PoC · poc_in_github

affected products (16)

Products and version ranges known to be affected.

Oracle Fusion Middleware 12.2.1.3.0all versionscert_bundDEcpe:/a:oracle:fusion_middleware:12.2.1.3.0
Oracle Fusion Middleware 12.2.1.4.0all versionscert_bundDEcpe:/a:oracle:fusion_middleware:12.2.1.4.0
Oracle Fusion Middleware 14.1.1.0.0all versionscert_bundDEcpe:/a:oracle:fusion_middleware:14.1.1.0.0
Oracle Fusion Middleware 8.5.6all versionscert_bundDEcpe:/a:oracle:fusion_middleware:8.5.6
Oracle Fusion Middleware 8.5.7all versionscert_bundDEcpe:/a:oracle:fusion_middleware:8.5.7
Apache Software Foundation Apache Mina SSHD1.0 → 2.10enisa_euvdEU
Apache Software Foundation NiFi Registry≤ 1.24.0fstec_bduRU
Apache Software Foundation SSHD1.0.0 → 2.10.0fstec_bduRU
jd_edwards_enterpriseone_toolsall versionsncsc_nlNLcpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2.7:*:*:*:*:*:*:*
jd_edwards_world_securityall versionsncsc_nlNLcpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:*
oracle jd edwards enterpriseone orchestratorall versionsncsc_nlNLcpe:2.3:a:oracle:jd_edwards_enterpriseone_orchestrator:*:*:*:*:*:*:*:*
oracle jd edwards enterpriseone toolsall versionsncsc_nlNLcpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*
apache sshd1.0.0 → 2.9.3nvdUScpe:2.3:a:apache:sshd:*:*:*:*:*:*:*:*
Maven org.apache.sshd:sshd-common2.1.0 → 2.9.3osvUSpkg:maven/org.apache.sshd/sshd-common
Maven org.apache.sshd:sshd-core1.0.0 → 2.1.0osvUSpkg:maven/org.apache.sshd/sshd-core
Maven org.apache.sshd:sshd-sftp1.0.0 → 2.9.3osvUSpkg:maven/org.apache.sshd/sshd-sftp

advisories (7)

Vendor and ecosystem advisories describing this.

NCSC-2024-0302Kwetsbaarheden verholpen in Oracle JD EdwardsNL2024-07-17csaf · ncsc_nlNL
Er zijn kwetsbaarheden verholpen in Oracle JD Edwards.
WID-SEC-W-2023-2518Red Hat JBoss Data Grid: Mehre SchwachstellenDeutsch2023-09-28csaf · cert_bundDE
Ein entfernter anonymer Angreifer kann eine Schwachstelle in Red Hat JBoss Data Grid ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder vertrauliche Informationen offenzulegen.
WID-SEC-W-2023-2674Oracle Fusion Middleware: Mehrere SchwachstellenDeutsch2023-10-17csaf · cert_bundDE
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
WID-SEC-W-2024-0117Oracle Retail Applications: Mehrere SchwachstellenDeutsch2024-01-16csaf · cert_bundDE
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Retail Applications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
WID-SEC-W-2024-0899Oracle Fusion Middleware: Mehrere SchwachstellenDeutsch2024-04-16csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
WID-SEC-W-2024-1657Oracle JD Edwards: Mehrere SchwachstellenDeutsch2024-07-16csaf · cert_bundDE
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle JD Edwards ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
GHSA-mjmq-gwgm-5qhmApache MINA SSHD information disclosure vulnerability2023-07-10ghsa · osvUS
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA. In SFTP servers implemented using Apache MINA SSHD that use a RootedFileSystem, logged users may be able to discover "exists/does not exist" information about items outside the rooted tree via paths including parent navigation ("..") beyond the root, or involving symlinks. This issue affects Apache MINA: from 1.0 before 2.9.3 Users are recommended to upgrade to 2.9.3 Until version 2.1.0, some of the code affected by this vulnerability appeared in org.apache.sshd:sshd-core. Version 2.1.0 contains a [commit](https://github.com/apache/mina-sshd/commit/10de190e7d3f9189deb76b8d08c72334a1fe2df0) where the code was moved to the package org.apache.sshd:sshd-common, which did not exist until version 2.1.0.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cert_bund ncsc_nl nvd osv NVD CVE.org MITRE

published 2023-07-10modified 2026-06-17

references (9)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan