Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Oliva Expertise Component: Oliva Ekspertiz Clear all filters
TI-2023-02778 CVE-2023-2963 · GHSA-r93v-xp4m-4vwv

SQLi in Oliva Expertise

Priority MEDIUM 50

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Oliva Expertise Oliva Expertise EKS allows SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0062 Published 2023-07-17 Fixed in 1.2 CWE-89
TI-2023-02775 CVE-2023-2960 · GHSA-g6mj-5jpw-qj63

XSS in Oliva Expertise

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Oliva Expertise Oliva Expertise EKS allows Cross-Site Scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00357 Published 2023-07-17 Fixed in 1.2 CWE-79
TI-2023-02774 CVE-2023-2959 · GHSA-hw5v-2rvv-67p7

Authentication Bypass by Primary Weakness in Oliva Expertise

Priority MEDIUM 40

Authentication Bypass by Primary Weakness vulnerability in Oliva Expertise Oliva Expertise EKS allows Collect Data as Provided by Users.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00628 Published 2023-07-17 Fixed in 1.2 CWE-305