CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-04-11
Novi Survey Remote Code Execution (RCE) Vulnerability Security Advisory (CVE-2023-29492)
[Affected Scope] All on-premises and cloud web application servers running Novi Survey versions prior to 8.9.43676.
[Impact] Unauthenticated remote attackers can execute arbitrary system commands and malicious code under the security context of the web service account.
[Mitigation] Immediately upgrade to the official patched version (8.9.43676 or higher) and restrict external access to the application.