CVE-2023-2959

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Authentication Bypass by Primary Weakness vulnerability in Oliva Expertise Oliva Expertise EKS allows Collect Data as Provided by Users.

This issue affects Oliva Expertise EKS: before 1.2.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-305CWE-287

Affected software

No affected versions have been published.

Timeline

Published
Jul 17, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-295967.8Buffer Overflow vulnerability found in ByronKnoll Cmix v.19 allows an attacker to execute arbitrary code and cause a denial of service via tCVE-2023-295978.8bloofox v0.5.2 was discovered to contain a SQL injection vulnerability via the component /index.php?mode=content&page=pages&action=edit&eid=CVE-2023-295989.8lmxcms v1.4.1 was discovered to contain a SQL injection vulnerability via the setbook parameter at index.php.CVE-2023-29606.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Oliva Expertise Oliva Expertise EKS alCVE-2023-29613.3A segmentation fault flaw was found in the Advancecomp package. This may lead to decreased availability.CVE-2023-29629.8A vulnerability, which was classified as critical, has been found in SourceCodester Faculty Evaluation System 1.0. Affected by this issue isCVE-2023-296218.8Purchase Order Management v1.0 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary CVE-2023-296229.8Purchase Order Management v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /purchase_order/admin/lCVE-2023-296236.1Purchase Order Management v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the password parameter at CVE-2023-296258.8Employee Performance Evaluation System v1.0 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execuCVE-2023-296267.5Yoga Class Registration System 1.0 was discovered to contain a SQL injection vulnerability via the cid parameter at /admin/login.php.CVE-2023-296278.8Online Pizza Ordering v1.0 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code
CVE-2023-2959: High severity, CVSS 7.5 | Vulnix