CVE-2023-45893

7.5 highEPSS 0.6%

High (7.5) in floorsightsoftware customer portal. EPSS 0.6% chance of exploitation in the next 30 days.

An indirect Object Reference (IDOR) in the Order and Invoice pages in Floorsight Customer Portal Q3 2023 allows an unauthenticated remote attacker to view sensitive customer information.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-10-31)
CWE: CWE-639
Published: 2024-01-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

floorsightsoftware:customer_portal

References

https://github.com/Oracle-Security/CVEs/blob/main/FloorsightSoftware/CVE-2023-45893.md
https://github.com/Oracle-Security/CVEs/blob/main/FloorsightSoftware/CVE-2023-45893.md

Check your stack JSON