NVD disclosure day

Published threat advisories for June 23, 2025

CVE-2023-47031

NCR Terminal Handler Privilege Escalation Vulnerability

Halo Surface Signal: 2 out of 5 — less likely to be public-facing.

An unauthenticated remote attacker can escalate privileges in NCR Terminal Handler by sending a crafted POST request to its SOAP API, potentially allowing unauthorized access to system functionalities. The absence of authentication and network exploitability make this a critical concern for systems processing sensitive

NVD modified: NVD date unavailable

CVE advisoryKnown Exploit

CVE-2025-48700

Zimbra Collaboration Cross-Site Scripting Vulnerability

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

A cross-site scripting vulnerability in Zimbra Collaboration allows attackers to execute JavaScript, potentially leading to unauthorized access to sensitive information. This impacts organizations using the Zimbra Classic UI by exposing user sessions when a crafted email is viewed, posing a risk of data compromise.

NVD modified: NVD date unavailable • CISA KEV