Lucene search

TR-CERTCVE-2023-2960

HistoryJul 17, 2023 - 2:15 p.m.

CVE-2023-2960

2023-07-1714:15:10

CWE-79

TR-CERT

web.nvd.nist.gov

cve-2023-2960

cross-site scripting

xss

oliva expertise eks

security vulnerability

nvd

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

27.6%

JSON

Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in Oliva Expertise Oliva Expertise EKS allows Cross-Site Scripting (XSS).This issue affects Oliva Expertise EKS: before 1.2.

Affected configurations

Nvd

Node

olivaekspertizoliva_ekspertizRange<1.2

VendorProductVersionCPE
olivaekspertizoliva_ekspertiz*cpe:2.3:a:olivaekspertiz:oliva_ekspertiz:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
olivaekspertiz	oliva_ekspertiz	*	cpe:2.3:a:olivaekspertiz:oliva_ekspertiz::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Oliva Expertise EKS",
    "vendor": "Oliva Expertise",
    "versions": [
      {
        "lessThan": "1.2",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.usom.gov.tr/bildirim/tr-23-0409

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

27.6%

JSON

Related for CVE-2023-2960