CVE-2023-5983Information Disclosure in Botanik Software Pharmacy Automation

7.5HighCVSS base score
0.63%Exploitation in 30 daysEPSS · top 49% of all CVEs
NoKnown exploitednot in CISA's KEV catalog
NonePublic exploitsnone known yet

Description

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Botanik Software Pharmacy Automation allows Retrieve Embedded Sensitive Data. This issue affects Pharmacy Automation: before 2.1.133.0.

Timeline

2023
7 Nov 2023
7 Nov 2023
ID reserved
By TR-CERT
22 Nov 202315 days later
22 Nov 2023· 15 days later
Published
2026
20 May 20262 years later
20 May 2026· 2 years later
Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2023-5983, by who scored it
Scored by	CVSS	Score	Vector
TR-CERTCNA (assigner)	3.1	High7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVDNVD · Modified	3.1	High7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS (exploitation in 30 days): 0.63% · top 49% of all CVEs (14 Nov 2026)
CISA SSVC: Exploitation: none · Automatable: yes · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.

Affected products

Botanik Software · Pharmacy Automation
- affected < 2.1.133.0

References2

https://www.usom.gov.tr/bildirim/tr-23-0652 (opens in a new tab)government-resourcebroken-linkx_transferred
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0652 (opens in a new tab)government-resource

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2023-5983](https://cveledger.app/badge/CVE-2023-5983.svg)](https://cveledger.app/cve/CVE-2023-5983)

Record last updated 20 May 2026, 14:03 UTC.