{"history":[{"alert":0,"cve":"CVE-2023-45727","id":22486,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.04822, \"percentile\": 0.92102}"},{"alert":0,"cve":"CVE-2023-45727","id":20105,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.04822, \"percentile\": 0.92052}"},{"alert":0,"cve":"CVE-2023-45727","id":18072,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.04822, \"percentile\": 0.92042}"},{"alert":0,"cve":"CVE-2023-45727","id":16136,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.04822, \"percentile\": 0.92038}"},{"alert":0,"cve":"CVE-2023-45727","id":14114,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.04822, \"percentile\": 0.92032}"},{"alert":0,"cve":"CVE-2023-45727","id":11896,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.04822, \"percentile\": 0.92019}"},{"alert":0,"cve":"CVE-2023-45727","id":9882,"kind":"epss","observed_at":1793938800,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.04822, \"percentile\": 0.92011}"},{"alert":0,"cve":"CVE-2023-45727","id":7430,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.04822, \"percentile\": 0.92005}"},{"alert":1,"cve":"CVE-2023-45727","id":6207,"kind":"cna","observed_at":1793809200,"payload":"{\"containers\": {\"adp\": [{\"providerMetadata\": {\"dateUpdated\": \"2024-08-02T20:29:32.421Z\", \"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\"}, \"references\": [{\"tags\": [\"x_transferred\"], \"url\": \"https://www.proself.jp/information/153/\"}, {\"tags\": [\"x_transferred\"], \"url\": \"https://jvn.jp/en/jp/JVN95981460/\"}], \"title\": \"CVE Program Container\"}, {\"affected\": [{\"cpes\": [\"cpe:2.3:a:northgrid:proself:-:*:*:*:enterprise:*:*:*\"], \"defaultStatus\": \"unknown\", \"product\": \"proself\", \"vendor\": \"northgrid\", \"versions\": [{\"lessThanOrEqual\": \"5.62\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}]}, {\"cpes\": [\"cpe:2.3:a:northgrid:proself:-:*:*:*:gateway:*:*:*\"], \"defaultStatus\": \"unknown\", \"product\": \"proself\", \"vendor\": \"northgrid\", \"versions\": [{\"lessThanOrEqual\": \"1.65\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}]}, {\"cpes\": [\"cpe:2.3:a:northgrid:proself:-:*:*:*:standard:*:*:*\"], \"defaultStatus\": \"unknown\", \"product\": \"proself\", \"vendor\": \"northgrid\", \"versions\": [{\"lessThanOrEqual\": \"5.62\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}]}, {\"cpes\": [\"cpe:2.3:a:northgrid:proself:-:*:*:*:mail_sanitize:*:*:*\"], \"defaultStatus\": \"unknown\", \"product\": \"proself\", \"vendor\": \"northgrid\", \"versions\": [{\"lessThanOrEqual\": \"1.08\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}]}], \"metrics\": [{\"cvssV3_1\": {\"attackComplexity\": \"LOW\", \"attackVector\": \"NETWORK\", \"availabilityImpact\": \"NONE\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"scope\": \"UNCHANGED\", \"userInteraction\": \"NONE\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\", \"version\": \"3.1\"}}, {\"other\": {\"content\": {\"id\": \"CVE-2023-45727\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2024-12-06T04:55:30.434626Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2024-12-03\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-45727\"}, \"type\": \"kev\"}}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-611\", \"description\": \"CWE-611 Improper Restriction of XML External Entity Reference\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2025-10-21T23:05:34.245Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-45727\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2024-12-03T00:00:00.000Z\", \"value\": \"CVE-2023-45727 added to CISA KEV\"}], \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"product\": \"Proself Enterprise/Standard Edition\", \"vendor\": \"North Grid Corporation\", \"versions\": [{\"status\": \"affected\", \"version\": \"Ver5.62 and earlier\"}]}, {\"product\": \"Proself Gateway Edition\", \"vendor\": \"North Grid Corporation\", \"versions\": [{\"status\": \"affected\", \"version\": \"Ver1.65 and earlier\"}]}, {\"product\": \"Proself Mail Sanitize Edition\", \"vendor\": \"North Grid Corporation\", \"versions\": [{\"status\": \"affected\", \"version\": \"Ver1.08 and earlier\"}]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Proself Enterprise/Standard Edition Ver5.62 and earlier, Proself Gateway Edition Ver1.65 and earlier, and Proself Mail Sanitize Edition Ver1.08 and earlier allow a remote unauthenticated attacker to conduct XML External Entity (XXE) attacks. By processing a specially crafted request containing malformed XML data, arbitrary files on the server containing account information may be read by the attacker.\"}], \"problemTypes\": [{\"descriptions\": [{\"description\": \"XML external entities (XXE)\", \"lang\": \"en\", \"type\": \"text\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2023-10-18T09:01:12.285Z\", \"orgId\": \"ede6fdc4-6654-4307-a26d-3331c018e2ce\", \"shortName\": \"jpcert\"}, \"references\": [{\"url\": \"https://www.proself.jp/information/153/\"}, {\"url\": \"https://jvn.jp/en/jp/JVN95981460/\"}]}}, \"cveMetadata\": {\"assignerOrgId\": \"ede6fdc4-6654-4307-a26d-3331c018e2ce\", \"assignerShortName\": \"jpcert\", \"cveId\": \"CVE-2023-45727\", \"datePublished\": \"2023-10-18T09:01:12.285Z\", \"dateReserved\": \"2023-10-11T07:32:42.029Z\", \"dateUpdated\": \"2025-10-21T23:05:34.245Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.1\"}"},{"alert":0,"cve":"CVE-2023-45727","id":5207,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.04822, \"percentile\": 0.9199}"},{"alert":0,"cve":"CVE-2023-45727","id":2989,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.04822, \"percentile\": 0.91979}"},{"alert":1,"cve":"CVE-2023-45727","id":543,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2023-45727\", \"cwes\": [\"CWE-611\"], \"dateAdded\": \"2024-12-03\", \"dueDate\": \"2024-12-24\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Unknown\", \"notes\": \"https://www.proself.jp/information/153/ ; https://nvd.nist.gov/vuln/detail/CVE-2023-45727\", \"product\": \"Proself\", \"requiredAction\": \"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.\", \"shortDescription\": \"North Grid Proself Enterprise/Standard, Gateway, and Mail Sanitize contain an improper restriction of XML External Entity (XXE) reference vulnerability, which could allow a remote, unauthenticated attacker to conduct an XXE attack.\", \"vendorProject\": \"North Grid\", \"vulnerabilityName\": \"North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability\"}"}],"record":{"affected":[{"product":"Proself Enterprise/Standard Edition","vendor":"North Grid Corporation","versions":[{"status":"affected","version":"Ver5.62 and earlier"}]},{"product":"Proself Gateway Edition","vendor":"North Grid Corporation","versions":[{"status":"affected","version":"Ver1.65 and earlier"}]},{"product":"Proself Mail Sanitize Edition","vendor":"North Grid Corporation","versions":[{"status":"affected","version":"Ver1.08 and earlier"}]}],"cna":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-02T20:29:32.421Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_transferred"],"url":"https://www.proself.jp/information/153/"},{"tags":["x_transferred"],"url":"https://jvn.jp/en/jp/JVN95981460/"}],"title":"CVE Program Container"},{"affected":[{"cpes":["cpe:2.3:a:northgrid:proself:-:*:*:*:enterprise:*:*:*"],"defaultStatus":"unknown","product":"proself","vendor":"northgrid","versions":[{"lessThanOrEqual":"5.62","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:a:northgrid:proself:-:*:*:*:gateway:*:*:*"],"defaultStatus":"unknown","product":"proself","vendor":"northgrid","versions":[{"lessThanOrEqual":"1.65","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:a:northgrid:proself:-:*:*:*:standard:*:*:*"],"defaultStatus":"unknown","product":"proself","vendor":"northgrid","versions":[{"lessThanOrEqual":"5.62","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:a:northgrid:proself:-:*:*:*:mail_sanitize:*:*:*"],"defaultStatus":"unknown","product":"proself","vendor":"northgrid","versions":[{"lessThanOrEqual":"1.08","status":"affected","version":"0","versionType":"custom"}]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"}},{"other":{"content":{"id":"CVE-2023-45727","options":[{"Exploitation":"active"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-12-06T04:55:30.434626Z","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2024-12-03","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-45727"},"type":"kev"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-611","description":"CWE-611 Improper Restriction of XML External Entity Reference","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2025-10-21T23:05:34.245Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-45727"}],"timeline":[{"lang":"en","time":"2024-12-03T00:00:00.000Z","value":"CVE-2023-45727 added to CISA KEV"}],"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"product":"Proself Enterprise/Standard Edition","vendor":"North Grid Corporation","versions":[{"status":"affected","version":"Ver5.62 and earlier"}]},{"product":"Proself Gateway Edition","vendor":"North Grid Corporation","versions":[{"status":"affected","version":"Ver1.65 and earlier"}]},{"product":"Proself Mail Sanitize Edition","vendor":"North Grid Corporation","versions":[{"status":"affected","version":"Ver1.08 and earlier"}]}],"descriptions":[{"lang":"en","value":"Proself Enterprise/Standard Edition Ver5.62 and earlier, Proself Gateway Edition Ver1.65 and earlier, and Proself Mail Sanitize Edition Ver1.08 and earlier allow a remote unauthenticated attacker to conduct XML External Entity (XXE) attacks. By processing a specially crafted request containing malformed XML data, arbitrary files on the server containing account information may be read by the attacker."}],"problemTypes":[{"descriptions":[{"description":"XML external entities (XXE)","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2023-10-18T09:01:12.285Z","orgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","shortName":"jpcert"},"references":[{"url":"https://www.proself.jp/information/153/"},{"url":"https://jvn.jp/en/jp/JVN95981460/"}]}},"cveMetadata":{"assignerOrgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","assignerShortName":"jpcert","cveId":"CVE-2023-45727","datePublished":"2023-10-18T09:01:12.285Z","dateReserved":"2023-10-11T07:32:42.029Z","dateUpdated":"2025-10-21T23:05:34.245Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"cna_checked":1794241201,"cve":"CVE-2023-45727","description":"Proself Enterprise/Standard Edition Ver5.62 and earlier, Proself Gateway Edition Ver1.65 and earlier, and Proself Mail Sanitize Edition Ver1.08 and earlier allow a remote unauthenticated attacker to conduct XML External Entity (XXE) attacks. By processing a specially crafted request containing malformed XML data, arbitrary files on the server containing account information may be read by the attacker.","epss":{"date":"2026-11-12","epss":0.04822,"percentile":0.92102},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2023-45727","cwes":["CWE-611"],"dateAdded":"2024-12-03","dueDate":"2024-12-24","forensicTriage":"No","knownRansomwareCampaignUse":"Unknown","notes":"https://www.proself.jp/information/153/ ; https://nvd.nist.gov/vuln/detail/CVE-2023-45727","product":"Proself","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","shortDescription":"North Grid Proself Enterprise/Standard, Gateway, and Mail Sanitize contain an improper restriction of XML External Entity (XXE) reference vulnerability, which could allow a remote, unauthenticated attacker to conduct an XXE attack.","vendorProject":"North Grid","vulnerabilityName":"North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability"},"kev_checked":1794522003,"products":"North Grid Corporation Proself Enterprise/Standard Edition, North Grid Corporation Proself Gateway Edition, North Grid Corporation Proself Mail Sanitize Edition","references":["https://www.proself.jp/information/153/","https://jvn.jp/en/jp/JVN95981460/","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-45727"],"score":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","provider":"CISA-ADP","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability","updated_at":1794500401,"workarounds":""},"sources":[]}