VULNERABILITY INTELLIGENCE

CVE-2023-29492

CVSS score9.8 CRITICAL

EPSS probability2.69%

CISA KEVKnown exploited vulnerability

Published2023-04-11

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Novi Survey Insecure Deserialization Vulnerability

Vendor / product: Novi Survey / Novi Survey

Description

Novi Survey before 8.9.43676 allows remote attackers to execute arbitrary code on the server in the context of the service account. This does not provide access to stored survey or response data.

Weakness classification

nvd@nist.gov: CWE-94
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-94

Primary references

cve@mitre.org — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource