CVE-2023-29492Novi Survey Insecure Deserialization Vulnerability

Novi Survey before 8.9.43676 allows remote attackers to execute arbitrary code on the server in the context of the service account. This does not provide access to stored survey or response data.

9.8 CRITICALEPSS 2.69%⚡ Known Exploited (CISA KEV)NVD: Analyzed

Last updated: 2026-06-17 05:50 UTC

Overview Affected Products References

NVD CVE.org

Overview

Severity

Score	Severity	Version	Vector String
9.8	CRITICAL	3.1NVD	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA required action

⚡ Known exploited · remediation due May 4, 2023

Apply updates per vendor instructions.

Details

CVE ID: CVE-2023-29492
Status: Analyzed
Assigner (CNA): mitre
Published: Apr 11, 2023
Last modified: 2026-06-17 05:50 UTC
Weaknesses: CWE-94

Sources

NVD
CVE.org
CISA KEV
FIRST EPSS

Refreshed hourly from the sources above. Last fetched 2026-11-09 16:19 UTC.