CVE-2023-33668

9.8 criticalEPSS 0.5%

Critical (9.8) in digiexam digiexam. EPSS 0.5% chance of exploitation in the next 30 days.

DigiExam up to v14.0.2 lacks integrity checks for native modules, allowing attackers to access PII and takeover accounts on shared computers.

Severity

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 43% of CVEs (scores of 2026-10-31)
CWE: CWE-354
Published: 2023-07-12
Modified: 2026-07-09
Record from: the NVD, synced 2026-10-19