Security services, software licences and managed support from one accountable partner.

← All vulnerabilities

Not yet scored Actively exploited

CVE-2023-29492

Novi Survey Insecure Deserialization Vulnerability

Description

Novi Survey contains an insecure deserialization vulnerability that allows remote attackers to execute code on the server in the context of the service account.

Recommended action

Apply updates per vendor instructions.

CISA remediation due date for U.S. federal agencies: 4 May 2023.

Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.