CVE-2023-2963
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Summary
CVE-2023-2963 is an SQL Injection vulnerability affecting Oliva Expertise EKS before version 1.2. An attacker can exploit this issue by introducing malicious SQL commands, potentially gaining unauthorized access to sensitive data or making unintended modifications to the database. The vulnerability arises due to improper neutralization of special elements in SQL commands, leaving the system susceptible to manipulation. This issue can pose a significant risk to the confidentiality, integrity, and availability of affected databases. Organizations using Oliva Expertise EKS are advised to upgrade to the latest version or implement appropriate security measures to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions