Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-44429 State: PUBLISHED Published: 2023-01-04T00:00:00.000Z Last Updated: 2025-04-10T15:06:34.268Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: CWE-122 Description: In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1610118225591336001
CVE ID: CVE-2022-44430 State: PUBLISHED Published: 2023-01-04T00:00:00.000Z Last Updated: 2025-04-10T15:05:44.813Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: CWE-122 Description: In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1610118225591336001
CVE ID: CVE-2022-44431 State: PUBLISHED Published: 2023-01-04T00:00:00.000Z Last Updated: 2025-04-10T15:03:58.524Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: CWE-787 Description: In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1610118225591336001
CVE ID: CVE-2022-44432 State: PUBLISHED Published: 2023-01-04T00:00:00.000Z Last Updated: 2025-04-10T15:02:24.496Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: CWE-190 Description: In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1610118225591336001
CVE ID: CVE-2022-44433 State: PUBLISHED Published: 2023-05-09T01:21:36.081Z Last Updated: 2025-01-28T17:06:45.294Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In phoneEx service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-44434 State: PUBLISHED Published: 2023-01-04T00:00:00.000Z Last Updated: 2025-04-10T15:01:03.913Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: CWE-862 Description: In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1610118225591336001
CVE ID: CVE-2022-44435 State: PUBLISHED Published: 2023-01-04T00:00:00.000Z Last Updated: 2025-04-10T15:00:11.126Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: CWE-862 Description: In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1610118225591336001
CVE ID: CVE-2022-44436 State: PUBLISHED Published: 2023-01-04T00:00:00.000Z Last Updated: 2025-04-10T14:36:09.564Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: CWE-862 Description: In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1610118225591336001
CVE ID: CVE-2022-44437 State: PUBLISHED Published: 2023-01-04T00:00:00.000Z Last Updated: 2025-04-10T19:08:41.210Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: CWE-862 Description: In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1610118225591336001
CVE ID: CVE-2022-44438 State: PUBLISHED Published: 2023-01-04T00:00:00.000Z Last Updated: 2025-04-10T14:33:17.614Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: CWE-862 Description: In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1610118225591336001
CVE ID: CVE-2022-44439 State: PUBLISHED Published: 2023-01-04T00:00:00.000Z Last Updated: 2025-04-10T14:31:59.455Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: CWE-862 Description: In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1610118225591336001
CVE ID: CVE-2022-44440 State: PUBLISHED Published: 2023-01-04T00:00:00.000Z Last Updated: 2025-04-10T14:30:45.290Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: CWE-125 Description: In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1610118225591336001
CVE ID: CVE-2022-44441 State: PUBLISHED Published: 2023-01-04T00:00:00.000Z Last Updated: 2025-04-10T14:23:47.745Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: CWE-125 Description: In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1610118225591336001
CVE ID: CVE-2022-44442 State: PUBLISHED Published: 2023-01-04T00:00:00.000Z Last Updated: 2025-04-10T14:22:27.974Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: CWE-125 Description: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1610118225591336001
CVE ID: CVE-2022-44443 State: PUBLISHED Published: 2023-01-04T00:00:00.000Z Last Updated: 2025-04-10T14:20:12.047Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: CWE-126 Description: In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1610118225591336001
CVE ID: CVE-2022-44444 State: PUBLISHED Published: 2023-01-04T00:00:00.000Z Last Updated: 2025-04-10T14:17:53.954Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: CWE-191 Description: In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1610118225591336001
CVE ID: CVE-2022-44445 State: PUBLISHED Published: 2023-01-04T00:00:00.000Z Last Updated: 2025-04-10T14:09:22.781Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: CWE-126 Description: In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1610118225591336001
CVE ID: CVE-2022-44446 State: PUBLISHED Published: 2023-01-04T00:00:00.000Z Last Updated: 2025-04-10T14:59:13.420Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: CWE-126 Description: In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1610118225591336001
CVE ID: CVE-2022-44447 State: PUBLISHED Published: 2023-02-06T05:27:55.591Z Last Updated: 2025-03-26T14:01:15.694Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: n/a Description: In wlan driver, there is a possible null pointer dereference issue due to a missing bounds check. This could lead to local denial of service in wlan services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210
CVE ID: CVE-2022-44448 State: PUBLISHED Published: 2023-02-06T05:27:40.636Z Last Updated: 2025-03-26T14:12:59.375Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Problem Types: n/a Description: In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210
CVE ID: CVE-2022-44449 State: PUBLISHED Published: 2022-12-21T00:00:00.000Z Last Updated: 2025-04-16T17:35:09.408Z Vendors: Zenphoto Products: Zenphoto Problem Types: Cross-site scripting Description: Stored cross-site scripting vulnerability in Zenphoto versions prior to 1.6 allows remote a remote authenticated attacker with an administrative privilege to inject an arbitrary script. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zenphoto.org/ - https://github.com/zenphoto/zenphoto - https://jvn.jp/en/jp/JVN06093462/index.html
CVE ID: CVE-2022-44450 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:21:19.359Z Description: No description available.
CVE ID: CVE-2022-44451 State: PUBLISHED Published: 2023-07-21T20:25:39.864Z Last Updated: 2025-03-05T18:48:22.079Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Open Babel Products: Open Babel Problem Types: CWE-824 Description: A use of uninitialized pointer vulnerability exists in the MSI format atom functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-202
Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1669
CVE ID: CVE-2022-44452 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:21:20.756Z Description: No description available.
CVE ID: CVE-2022-44454 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:21:22.164Z Description: No description available.
CVE ID: CVE-2022-44455 State: PUBLISHED Published: 2022-12-08T00:00:00 Last Updated: 2024-08-03T13:54:03.395Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-120 Description: The appspawn and nwebspawn services within OpenHarmony-v3.1.2 and prior versions were found to be vulnerable to buffer overflow vulnerability due to insufficient input validation. An unprivileged malicious application would be able to gain code execution within any application installed on the device or cause application crash. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitee.com/
tion crash. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2022-12.md
CVE ID: CVE-2022-44456 State: PUBLISHED Published: 2022-12-19T00:00:00.000Z Last Updated: 2025-04-17T14:41:58.361Z Vendors: Contec Co., Ltd. Products: CONPROSYS HMI System (CHS) Problem Types: OS Command Injection Description: CONPROSYS HMI System (CHS) Ver.3.4.4?and earlier allows a remote unauthenticated attacker to execute an arbitrary OS command on the server where the product is running by sending a specially crafted request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_221014_en.pdf - https://www.contec.com/download/contract/contra
edia/Contec/jp/support/security-info/contec_security_chs_221014_en.pdf - https://www.contec.com/download/contract/contract4/?itemid=ea8039aa-3434-4999-9ab6-897aa690210c&downloaditemid=866d7d3c-aae9-438d-87f3-17aa040df90b - https://jvn.jp/en/vu/JVNVU96873821/index.html
CVE ID: CVE-2022-44457 State: PUBLISHED Published: 2022-11-08T00:00:00.000Z Last Updated: 2025-05-01T18:07:21.381Z Vendors: Siemens Products: Mendix SAML (Mendix 7 compatible), Mendix SAML (Mendix 8 compatible), Mendix SAML (Mendix 9 compatible, New Track), Mendix SAML (Mendix 9 compatible, Upgrade Track) Problem Types: CWE-294 Description: A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions < V1.17.0), Mendix SAML (Mendix 7 compatible) (All versions >= V1.17.0 < V1.17.2), Mendix SAML (Mendix 8 compatible) (All versions < V2.3.0), Mendix SAML (Mendix 8 compatible) (All versions >= V2.3.0 < V2.3.2), Mendix SAML (Mendix 9 compatible, New Track) (All versions
AML (Mendix 8 compatible) (All versions >= V2.3.0 < V2.3.2), Mendix SAML (Mendix 9 compatible, New Track) (All versions < V3.3.1), Mendix SAML (Mendix 9 compatible, New Track) (All versions >= V3.3.1 < V3.3.5), Mendix SAML (Mendix 9 compatible, Upgrade Track) (All versions < V3.3.0), Mendix SAML (Mendix 9 compatible, Upgrade Track) (All versions >= V3.3.0 < V3.3.4). Affected versions of the module insufficiently protect from packet capture replay, only when the not recommended, non default configuration option `'Allow Idp Initiated Authentication'` is enabled. This CVE entry describes the incomplete fix for CVE-2022-37011 in a specific non default configuration. Additional Analyst Notes: - C
y describes the incomplete fix for CVE-2022-37011 in a specific non default configuration. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-638652.pdf
CVE ID: CVE-2022-44462 State: PUBLISHED Published: 2022-12-19T10:00:14.221Z Last Updated: 2025-04-23T16:27:53.124Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/sec
CVE ID: CVE-2022-44463 State: PUBLISHED Published: 2022-12-21T01:21:43.830Z Last Updated: 2025-04-23T16:25:16.780Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/sec
CVE ID: CVE-2022-44465 State: PUBLISHED Published: 2022-12-21T01:21:43.830Z Last Updated: 2025-04-23T16:25:10.421Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/sec
CVE ID: CVE-2022-44466 State: PUBLISHED Published: 2022-12-21T01:21:43.830Z Last Updated: 2025-04-23T16:25:05.040Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/sec
CVE ID: CVE-2022-44467 State: PUBLISHED Published: 2022-12-21T01:21:43.830Z Last Updated: 2025-04-23T16:24:58.718Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/sec
CVE ID: CVE-2022-44468 State: PUBLISHED Published: 2022-12-19T10:00:54.974Z Last Updated: 2025-04-23T16:27:11.120Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/sec
CVE ID: CVE-2022-44469 State: PUBLISHED Published: 2022-12-19T10:00:54.974Z Last Updated: 2025-04-23T16:27:04.818Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/sec
CVE ID: CVE-2022-44470 State: PUBLISHED Published: 2022-12-21T01:21:43.830Z Last Updated: 2025-04-23T16:24:48.013Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/sec
CVE ID: CVE-2022-44471 State: PUBLISHED Published: 2022-12-21T01:21:43.830Z Last Updated: 2025-04-23T16:24:37.208Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/sec
CVE ID: CVE-2022-44473 State: PUBLISHED Published: 2022-12-19T10:00:54.974Z Last Updated: 2025-04-23T16:26:56.649Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/sec