Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
letely compromising confidentiality but causing a limited impact on the availability of the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3210823
CVE ID: CVE-2022-32246 State: PUBLISHED Published: 2022-07-12T20:26:21 Last Updated: 2024-08-03T07:39:50.334Z Vendors: SAP SE Products: SAP BusinessObjects Business Intelligence Platform (Visual Difference Application) Problem Types: CWE-89 Description: SAP Busines Objects Business Intelligence Platform (Visual Difference Application) - versions 420, 430, allows an authenticated attacker who has access to BI admin console to send crafted queries and extract data from the SQL backend. On successful exploitation, the attacker can cause limited impact on confidentiality and integrity of the application Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/document
tegrity of the application Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3203079
CVE ID: CVE-2022-32247 State: PUBLISHED Published: 2022-07-12T20:27:32 Last Updated: 2024-08-03T07:39:50.129Z Vendors: SAP SE Products: SAP NetWeaver Enterprise Portal Problem Types: CWE-79 Description: SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution attack by an unauthenticated attacker due to improper sanitization of the User inputs while interacting on the Network. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022/02/fa865
pplication. Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3209557
CVE ID: CVE-2022-32248 State: PUBLISHED Published: 2022-07-12T20:27:22 Last Updated: 2024-08-03T07:39:51.053Z Vendors: SAP SE Products: SAP S/4HANA Problem Types: CWE-20 Description: Due to missing input validation in the Manage Checkbooks component of SAP S/4HANA - version 101, 102, 103, 104, 105, 106, an attacker could insert or edit the value of an existing field in the database. This leads to an impact on the integrity of the data. Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3216161
CVE ID: CVE-2022-32249 State: PUBLISHED Published: 2022-07-12T20:31:35 Last Updated: 2024-08-03T07:39:49.591Z Vendors: SAP SE Products: SAP Business one Problem Types: CWE-668 Description: Under special integration scenario of SAP Business one and SAP HANA - version 10.0, an attacker can exploit HANA cockpit�s data volume to gain access to highly sensitive information (e.g., high privileged account credentials) Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3212997
CVE ID: CVE-2022-32250 State: PUBLISHED Published: 2022-06-02T20:51:34 Last Updated: 2024-08-03T07:39:50.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to a use-after-free. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2022/05/31/1 - https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/net/netfilter?id=520778042ccca019f3ffa136dd0ca565c486cedd - http://www.openwall.com/lists/oss-security/2022/06/0
/commit/net/netfilter?id=520778042ccca019f3ffa136dd0ca565c486cedd - http://www.openwall.com/lists/oss-security/2022/06/03/1 - http://www.openwall.com/lists/oss-security/2022/06/04/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MO6Y3TC4WUUNKRP7OQA26OVTZTPCS6F2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UIZTJOJCVVEJVOQSCHE6IJQKMPISHQ5L/ - https://www.debian.org/security/2022/dsa-5161 - https://bugzilla.redhat.com/show_bug.cgi?id=2092427 - http://www.openwall.com/lists/oss-security/2022/06/20/1 - https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html - http://www.openwall.c
s/oss-security/2022/06/20/1 - https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html - http://www.openwall.com/lists/oss-security/2022/07/03/6 - http://www.openwall.com/lists/oss-security/2022/07/03/5 - https://www.debian.org/security/2022/dsa-5173 - https://security.netapp.com/advisory/ntap-20220715-0005/ - http://www.openwall.com/lists/oss-security/2022/08/25/1 - https://blog.theori.io/research/CVE-2022-32250-linux-kernel-lpe-2022/ - https://github.com/theori-io/CVE-2022-32250-exploit - http://www.openwall.com/lists/oss-security/2022/09/02/9
CVE ID: CVE-2022-32251 State: PUBLISHED Published: 2022-06-14T09:22:01.000Z Last Updated: 2025-04-21T13:52:49.764Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SINEMA Remote Connect Server Problem Types: CWE-306 Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). There is a missing authentication verification for a resource used to change the roles and permissions of a user. This could allow an attacker to change the permissions of any user and gain the privileges of an administrative user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Reference
vileges of an administrative user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf - https://cert-portal.siemens.com/productcert/html/ssa-484086.html
CVE ID: CVE-2022-32252 State: PUBLISHED Published: 2022-06-14T09:22:03 Last Updated: 2024-08-03T07:39:50.919Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SINEMA Remote Connect Server Problem Types: CWE-345 Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The application does not perform the integrity check of the update packages. Without validation, an admin user might be tricked to install a malicious package, granting root privileges to an attacker. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.c
Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf - https://cert-portal.siemens.com/productcert/html/ssa-484086.html
CVE ID: CVE-2022-32253 State: PUBLISHED Published: 2022-06-14T09:22:04 Last Updated: 2024-08-03T07:39:50.216Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Siemens Products: SINEMA Remote Connect Server Problem Types: CWE-20 Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). Due to improper input validation, the OpenSSL certificate's password could be printed to a file reachable by an attacker. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf - https://cert-portal.siemens.com/productcert/html/ssa-484086.html
CVE ID: CVE-2022-32254 State: PUBLISHED Published: 2022-06-14T09:22:06 Last Updated: 2024-08-03T07:39:50.261Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C) Vendors: Siemens Products: SINEMA Remote Connect Server Problem Types: CWE-532 Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). A customized HTTP POST request could force the application to write the status of a given user to a log file, exposing sensitive user information that could provide valuable guidance to an attacker. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com
dditional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf - https://cert-portal.siemens.com/productcert/html/ssa-484086.html
CVE ID: CVE-2022-32255 State: PUBLISHED Published: 2022-06-14T09:22:07 Last Updated: 2024-08-03T07:39:50.213Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C) Vendors: Siemens Products: SINEMA Remote Connect Server Problem Types: CWE-284 Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application consists of a web service that lacks proper access control for some of the endpoints. This could lead to unauthorized access to limited information. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-4840
- CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf - https://cert-portal.siemens.com/productcert/html/ssa-484086.html
CVE ID: CVE-2022-32256 State: PUBLISHED Published: 2022-06-14T09:22:09 Last Updated: 2024-08-03T07:39:50.188Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C) Vendors: Siemens Products: SINEMA Remote Connect Server Problem Types: CWE-284 Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application consists of a web service that lacks proper access control for some of the endpoints. This could lead to low privileged users accessing privileged information. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/p
yst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf - https://cert-portal.siemens.com/productcert/html/ssa-484086.html
CVE ID: CVE-2022-32257 State: PUBLISHED Published: 2024-03-12T10:41:49.947Z Last Updated: 2024-08-03T07:39:50.311Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SINEMA Remote Connect Server Problem Types: CWE-284 Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2). The affected application consists of a web service that lacks proper access control for some of the endpoints. This could lead to unauthorized access to resources and potentially lead to code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.
xecution. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-576771.html
CVE ID: CVE-2022-32258 State: PUBLISHED Published: 2022-06-14T09:22:10 Last Updated: 2024-08-03T07:39:50.638Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C) Vendors: Siemens Products: SINEMA Remote Connect Server Problem Types: CWE-448 Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application contains an older feature that allows to import device configurations via a specific endpoint. An attacker could use this vulnerability for information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productce
Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf - https://cert-portal.siemens.com/productcert/html/ssa-484086.html
CVE ID: CVE-2022-32259 State: PUBLISHED Published: 2022-06-14T09:22:12 Last Updated: 2024-08-03T07:39:51.062Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C) Vendors: Siemens Products: SINEMA Remote Connect Server Problem Types: CWE-1244 Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The system images for installation or update of the affected application contain unit test scripts with sensitive information. An attacker could gain information about testing architecture and also tamper with test configuration. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: -
amper with test configuration. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf - https://cert-portal.siemens.com/productcert/html/ssa-484086.html
CVE ID: CVE-2022-32260 State: PUBLISHED Published: 2022-06-14T09:22:14 Last Updated: 2024-08-03T07:39:50.426Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SINEMA Remote Connect Server Problem Types: CWE-286 Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application creates temporary user credentials for UMC (User Management Component) users. An attacker could use these temporary credentials for authentication bypass in certain scenarios. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.sieme
ios. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf - https://cert-portal.siemens.com/productcert/html/ssa-381581.html
CVE ID: CVE-2022-32261 State: PUBLISHED Published: 2022-06-14T09:22:16 Last Updated: 2024-08-03T07:39:50.132Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C) Vendors: Siemens Products: SINEMA Remote Connect Server Problem Types: CWE-233 Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application contains a misconfiguration in the APT update. This could allow an attacker to add insecure packages to the application. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf - https://cert-portal
VE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf - https://cert-portal.siemens.com/productcert/html/ssa-484086.html
CVE ID: CVE-2022-32262 State: PUBLISHED Published: 2022-06-14T09:22:17.000Z Last Updated: 2025-04-21T13:52:37.640Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SINEMA Remote Connect Server Problem Types: CWE-77 Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application contains a file upload server that is vulnerable to command injection. An attacker could use this to achieve arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf - htt
m Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf - https://cert-portal.siemens.com/productcert/html/ssa-484086.html
CVE ID: CVE-2022-32263 State: PUBLISHED Published: 2022-07-17T21:06:00 Last Updated: 2024-08-03T07:39:50.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pexip Infinity before 28.1 allows remote attackers to trigger a software abort via G.719. Additional Analyst Notes: - CVE Program Container: References: - https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-32263
CVE ID: CVE-2022-32264 State: PUBLISHED Published: 2022-09-06T17:49:31.000Z Last Updated: 2025-06-17T19:29:40.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: sys/netinet/tcp_timer.h in FreeBSD before 7.0 contains a denial-of-service (DoS) vulnerability due to improper handling of TSopt on TCP connections. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://jvn.jp/en/jp/JVN20930118/ - https://cgit.freebsd.org/src/commit/?id=4dc630cdd2f7a790604d2724ecb19c6aa95130a7
CVE ID: CVE-2022-32265 State: PUBLISHED Published: 2022-06-03T04:23:11 Last Updated: 2024-08-03T07:39:50.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: qDecoder before 12.1.0 does not ensure that the percent character is followed by two hex digits for URL decoding. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wolkykim/qdecoder/pull/29 - https://github.com/wolkykim/qdecoder/releases/tag/v12.1.0 - https://github.com/wolkykim/qdecoder/pull/29/commits/ce7c8a7ac450a823a11b06508ef1eb7441241f81#diff-1c4e2f5adfa1ad30618e78ff459b2c0758ecf34278459ad0a8d58db4fec622ea
CVE ID: CVE-2022-32266 State: PUBLISHED Published: 2022-11-14T00:00:00.000Z Last Updated: 2025-04-30T19:08:56.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: DMA attacks on the parameter buffer used by a software SMI handler used by the driver PcdSmmDxe could lead to a TOCTOU attack on the SMI handler and lead to corruption of other ACPI fields and adjacent memory fields. DMA attacks on the parameter buffer used by a software SMI handler used by the driver PcdSmmDxe could lead to a TOCTOU attack on the SMI handler and lead to corruption of other ACPI fields and adjacent memory fields. The attack would require detailed knowledge of the PCD database contents on the current plat
and adjacent memory fields. The attack would require detailed knowledge of the PCD database contents on the current platform. This issue was discovered by Insyde engineering during a security review. This issue is fixed in Kernel 5.3: 05.36.23, Kernel 5.4: 05.44.23, Kernel 5.5: 05.52.23. Kernel 5.2 is unaffected. CWE-787 An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the parameter buffer that is used by a software SMI handler (used by the PcdSmmDxe driver) could lead to a TOCTOU race-condition attack on the SMI handler, and lead to corruption of other ACPI fields and adjacent memory fields. The attack would require detailed knowledge of the PCD databa
orruption of other ACPI fields and adjacent memory fields. The attack would require detailed knowledge of the PCD database contents on the current platform. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.insyde.com/security-pledge - https://www.insyde.com/security-pledge/SA-2022045
CVE ID: CVE-2022-32267 State: PUBLISHED Published: 2022-11-14T00:00:00.000Z Last Updated: 2025-04-30T19:07:27.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: DMA transactions which are targeted at input buffers used for the SmmResourceCheckDxe software SMI handler cause SMRAM corruption (a TOCTOU attack) DMA transactions which are targeted at input buffers used for the software SMI handler used by the SmmResourceCheckDxe driver could cause SMRAM corruption through a TOCTOU attack... This issue was discovered by Insyde engineering. Fixed in kernel Kernel 5.2: 05.27.23. Kernel 5.3: 05.36.23. Kernel 5.4: 05.44.23. Kernel 5.5: 05.52.23 https://www.insyde.com/security-pledge/SA-20
05.27.23. Kernel 5.3: 05.36.23. Kernel 5.4: 05.44.23. Kernel 5.5: 05.52.23 https://www.insyde.com/security-pledge/SA-2022046 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.insyde.com/security-pledge - https://www.insyde.com/security-pledge/SA-2022046
CVE ID: CVE-2022-32268 State: PUBLISHED Published: 2022-06-03T05:19:38 Last Updated: 2024-08-03T07:39:50.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: StarWind SAN and NAS v0.2 build 1914 allow remote code execution. A flaw was found in REST API in StarWind Stack. REST command, which allows changing the hostname, doesn’t check a new hostname parameter. It goes directly to bash as part of a script. An attacker with non-root user access can inject arbitrary data into the command that will be executed with root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.starwindsoftware.com/security/sw-20220531-0001/
CVE ID: CVE-2022-32269 State: PUBLISHED Published: 2022-06-03T05:35:17 Last Updated: 2024-08-03T07:39:51.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Real Player 20.0.8.310, the G2 Control allows injection of unsafe javascript: URIs in local HTTP error pages (displayed by Internet Explorer core). This leads to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Edubr2020/RealPlayer_G2_RCE - https://www.youtube.com/watch?v=9c9Q4VZQOUk
CVE ID: CVE-2022-32270 State: PUBLISHED Published: 2022-06-03T05:35:35 Last Updated: 2024-08-03T07:39:50.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Real Player 20.0.7.309 and 20.0.8.310, external::Import() allows download of arbitrary file types and Directory Traversal, leading to Remote Code Execution. This occurs because it is possible to plant executables in the startup folder (DLL planting could also occur). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Edubr2020/RP_Import_RCE - https://youtu.be/CONlijEgDLc
CVE ID: CVE-2022-32271 State: PUBLISHED Published: 2022-06-03T05:35:26 Last Updated: 2024-08-03T07:39:50.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Real Player 20.0.8.310, there is a DCP:// URI Remote Arbitrary Code Execution Vulnerability. This is an internal URL Protocol used by Real Player to reference a file that contains an URL. It is possible to inject script code to arbitrary domains. It is also possible to reference arbitrary local files. Additional Analyst Notes: - CVE Program Container: References: - https://youtu.be/AMODp3iTnqY - https://github.com/Edubr2020/RP_DCP_Code_Exec
CVE ID: CVE-2022-32272 State: PUBLISHED Published: 2022-06-09T00:00:00 Last Updated: 2024-08-03T07:39:50.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: OPSWAT MetaDefender Core before 5.1.2, MetaDefender ICAP before 4.12.1, and MetaDefender Email Gateway Security before 5.6.1 have incorrect access control, resulting in privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://opswat.com - https://docs.opswat.com/mdcore/release-notes - https://docs.opswat.com/mdemail/release-notes - https://docs.opswat.com/mdicap/release-notes - https://docs.opswat.com/mdicap/release-notes/version-4-12-1 - https://docs.opswat.com/mdemail/release-notes/vers
notes - https://docs.opswat.com/mdicap/release-notes/version-4-12-1 - https://docs.opswat.com/mdemail/release-notes/version-5-6-1 - http://packetstormsecurity.com/files/171549/OPSWAT-Metadefender-Core-4.21.1-Privilege-Escalation.html
CVE ID: CVE-2022-32273 State: PUBLISHED Published: 2022-06-08T15:23:22 Last Updated: 2024-08-03T07:39:50.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: As a result of an observable discrepancy in returned messages, OPSWAT MetaDefender Core (MDCore) before 5.1.2 could allow an authenticated user to enumerate filenames on the server. Additional Analyst Notes: - CVE Program Container: References: - https://opswat.com - https://docs.opswat.com/mdcore/release-notes