CVE-2023-3983

high · 8.8

An authenticated SQL injection vulnerability exists in Advantech iView versions prior to v5.7.4 build 6752. An authenticated remote attacker can bypass checks in com.imc.iview.utils.CUtils.checkSQLInjection() to perform blind SQL injection.

8.8

CVSS

16.7%

EPSS (exploit prob.)

97th

EPSS percentile

2023-07-31

Published

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-89

Affected products

Vendor	Product	Affected versions
advantech	iview	< 5.7.4.6752

Check a specific version with /api/v1/cve/match.

References

https://www.tenable.com/security/research/tra-2023-24
https://www.tenable.com/security/research/tra-2023-24

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2023-3983