[{"vendor":"aki","product":"pmman.exe\\/standard_edition\\/","defaultStatus":"unknown","cpes":["cpe:2.3:a:aki:pmman.exe\\/standard_edition\\/:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThan":"2.5.1.12154","versionType":"custom","status":"affected"}]},{"vendor":"aki","product":"pmman.exe\\/pro_edition\\/","defaultStatus":"unknown","cpes":["cpe:2.3:a:aki:pmman.exe\\/pro_edition\\/:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThan":"2.5.1.12155","versionType":"custom","status":"affected"}]},{"vendor":"aki","product":"pmman.exe\\/standard_plus_imap4_edition","defaultStatus":"unknown","cpes":["cpe:2.3:a:aki:pmman.exe\\/standard_plus_imap4_edition:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThan":"2.5.1.12156","versionType":"custom","status":"affected"}]},{"vendor":"aki","product":"pmman.exe\\/pro_plus_imap4_edition\\/","defaultStatus":"unknown","cpes":["cpe:2.3:a:aki:pmman.exe\\/pro_plus_imap4_edition\\/:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThan":"2.5.1.12157","versionType":"custom","status":"affected"}]},{"vendor":"aki","product":"pmman.exe\\/enterprise_edition\\/","defaultStatus":"unknown","cpes":["cpe:2.3:a:aki:pmman.exe\\/enterprise_edition\\/:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThan":"2.5.1.12158","versionType":"custom","status":"affected"}]}]

{"timestamp":"2024-03-18T15:00:53.605686Z","id":"CVE-2023-40747","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"A.K.I Software","product":"pmman.exe (Standard edition)","versions":[{"version":"2.5.1.12154 and earlier","status":"affected"}]},{"vendor":"A.K.I Software","product":"pmman.exe (Pro edition)","versions":[{"version":"2.5.1.12155 and earlier","status":"affected"}]},{"vendor":"A.K.I Software","product":"pmman.exe (Standard + IMAP4 edition)","versions":[{"version":"2.5.1.12156 and earlier","status":"affected"}]},{"vendor":"A.K.I Software","product":"pmman.exe (Pro + IMAP4 edition)","versions":[{"version":"2.5.1.12157 and earlier","status":"affected"}]},{"vendor":"A.K.I Software","product":"pmman.exe (Enterprise edition)","versions":[{"version":"2.5.1.12158 and earlier","status":"affected"}]}]

CWE-22

https://akisoftware.com/Vulnerability202301.html

https://jvn.jp/en/jp/JVN92720882/

CISA-ADP AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Directory traversal vulnerability exists in A.K.I Software's PMailServer/PMailServer2 products' CGIs included in Internal Simple Webserver. If this vulnerability is exploited, a  remote attacker may access arbitrary files outside DocumentRoot.

JPCERT/CC https://akisoftware.com/Vulnerability202301.html [No types assigned]

JPCERT/CC https://jvn.jp/en/jp/JVN92720882/ [No types assigned]