Vendors / Oliva Expertise Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now Oliva Expertise records in CISA KEV No Oliva Expertise vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 50
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Oliva Expertise Oliva Expertise EKS allows SQL Injection.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0062 · Published 2023-07-17 · Fixed in 1.2 CWE-89
Priority MEDIUM 40
Authentication Bypass by Primary Weakness vulnerability in Oliva Expertise Oliva Expertise EKS allows Collect Data as Provided by Users.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00628 · Published 2023-07-17 · Fixed in 1.2 CWE-305
Priority LOW 27
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Oliva Expertise Oliva Expertise EKS allows Cross-Site Scripting (XSS).
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00357 · Published 2023-07-17 · Fixed in 1.2 CWE-79
Open these records in search → All records by CVSS severity
Critical1 High1 Medium1 Low0 No CVSS0