CVE-2023-7325: Mingyu Operations and Maintenance Audit and Risk Control System 0 to before 2023-08-10

CVE-2023-7325. EPSS 0.00405 (percentile 0.33244), scored 16-Oct-2026.

Affected technology

Mingyu Operations and Maintenance Audit and Risk Control System · 0 to before 2023-08-10
Anheng Information (Hangzhou DBAPP Security Information Technology Co., Ltd.)

Description’s affected range: up to 2023-08-10

Component: xmlrpc.sock endpoint (XML-RPC over unix socket handler)

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Vendor/CNA’s CVSS 4.0 assessment (base score 9.3/10) rates confidentiality and integrity impact as high; availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 18-Oct-2026 00:28 UTC

CWE: CWE-306, CWE-918
CCR priority: 7.6 /100 (P5)
EPSS: 0.00405 · percentile 0.33244 · 2026-10-16
KEV: no
Exploit signals: Source reports exploitation.
Signal evidence: Source advisory: source reports exploitation (exploited in the wild).

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-18 00:27:35.898420+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2023-7325.html