Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
tacks against the victim. IBM X-Force ID: 227125. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6825995 - https://exchange.xforce.ibmcloud.com/vulnerabilities/227125
CVE ID: CVE-2022-22505 State: PUBLISHED Published: 2022-07-31T17:30:33.031005Z Last Updated: 2024-09-17T01:12:13.689Z Severity: MEDIUM (CVSS 4.6 CVSS:3.0/AV:P/PR:N/UI:N/I:N/AC:L/A:N/C:H/S:U/E:U/RC:C/RL:O) Vendors: IBM Products: Robotic Process Automation Problem Types: Obtain Information Description: IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 contains a vulnerability that could allow IBM tenant credentials to be exposed. IBM X-Force ID: 227288. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6608404 - https://exchange.xforce.ibmcloud.com/vulnerabilities/227288
CVE ID: CVE-2022-22506 State: PUBLISHED Published: 2024-02-12T19:09:56.754Z Last Updated: 2024-08-03T03:14:55.304Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Robotic Process Automation Problem Types: CWE-200 Description: IBM Robotic Process Automation 21.0.2 contains a vulnerability that could allow user ids may be exposed across tenants. IBM X-Force ID: 227293. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6591237 - https://exchange.xforce.ibmcloud.com/vulnerabilities/227293
CVE ID: CVE-2022-22507 State: REJECTED Published: N/A Last Updated: 2023-07-02T21:50:45.702160Z Description: No description available.
CVE ID: CVE-2022-22508 State: PUBLISHED Published: 2023-05-15T09:27:38.793Z Last Updated: 2025-01-23T19:24:35.687Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: CODESYS V3 Products: CODESYS Control RTE (SL), CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control Win (SL), CODESYS HMI (SL), CODESYS Control Runtime System Toolkit, CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL Problem Types: CWE-20
for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL Problem Types: CWE-20 Description: Improper Input Validation vulnerability in multiple CODESYS V3 products allows an authenticated remote attacker to block consecutive logins of a specific type. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17351&token=a7c02b2825fea2bcaf80c1a8e62097d72ec90f1a&download=
CVE ID: CVE-2022-22509 State: PUBLISHED Published: 2022-02-02T12:26:12.582086Z Last Updated: 2024-09-17T01:31:08.892Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: n/a Problem Types: n/a Description: In Phoenix Contact FL SWITCH Series 2xxx in version 3.00 an incorrect privilege assignment allows an low privileged user to enable full access to the device configuration. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en/advisories/VDE-2022-001/
CVE ID: CVE-2022-22510 State: PUBLISHED Published: 2022-02-02T12:26:13.400519Z Last Updated: 2024-09-17T01:06:20.768Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: n/a Problem Types: n/a Description: Codesys Profinet in version V4.2.0.0 is prone to null pointer dereference that allows a denial of service (DoS) attack of an unauthenticated user via SNMP. Additional Analyst Notes: - CVE Program Container: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17020&token=9acf91a2b5e1719ff71a019e86c3e8e411bfd252&download=
CVE ID: CVE-2022-22511 State: PUBLISHED Published: 2022-03-09T19:38:43.516457Z Last Updated: 2024-09-17T00:16:00.059Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: WAGO Products: Compact Controller CC100 (751-9301), Edge Controller (752-8303/8000-002), Series PFC100 (750-81xx/xxx-xxx), Series PFC200 (750-82xx/xxx-xxx), Series Touch Panel 600 Advanced Line (762-5xxx), Series Touch Panel 600 Marine Line (762-6xxx), Series Touch Panel 600 Standard Line (762-4xxx) Problem Types: CWE-79 Description: Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks. An authorized attacker with user privileges may use this t
e vulnerable to reflected XSS (Cross-Site Scripting) attacks. An authorized attacker with user privileges may use this to gain access to confidential information on a PC that connects to the WBM after it has been compromised. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en/advisories/VDE-2022-004/
CVE ID: CVE-2022-22512 State: PUBLISHED Published: 2023-03-23T05:32:16.285Z Last Updated: 2025-02-25T19:24:27.774Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: VARTA Storage Products: Element backup, Element S1, Element S2, Element S3, Element S4, One L/XL, Pulse (not pulse neo) Problem Types: CWE-798 Description: Hard-coded credentials in Web-UI of multiple VARTA Storage products in multiple versions allows an unauthorized attacker to gain administrative access to the Web-UI via network. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2022-061/
CVE ID: CVE-2022-22513 State: PUBLISHED Published: 2022-04-07T18:21:12.792321Z Last Updated: 2024-09-17T04:29:14.122Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: CODESYS Products: CODESYS Control RTE (SL), CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control Win (SL), CODESYS Gateway, CODESYS Edge Gateway for Windows, CODESYS HMI (SL), CODESYS Development System V3, CODESYS Control Runtime System Toolkit, CODESYS Embedded Target Visu Toolkit, CODESYS Remote Target Visu Toolkit, CODESYS Control for BeagleBone SL, CODESYS Control for Beckhoff CX9020 SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, C
Beckhoff CX9020 SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL, CODESYS Edge Gateway for Linux Problem Types: CWE-476 Description: An authenticated remote attacker can cause a null pointer dereference in the CmpSettings component of the affected CODESYS products which leads to a crash. Additional Analyst Notes: - CVE Program Container: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17093&token=15cd8424832ea10dcd4873a409a09a539ee381ca&down
: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17093&token=15cd8424832ea10dcd4873a409a09a539ee381ca&download=
CVE ID: CVE-2022-22514 State: PUBLISHED Published: 2022-04-07T18:21:14.309072Z Last Updated: 2024-09-17T03:03:50.086Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: CODESYS Products: CODESYS Control RTE (SL), CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control Win (SL), CODESYS Gateway, CODESYS Edge Gateway for Windows, CODESYS HMI (SL), CODESYS Development System V3, CODESYS Control Runtime System Toolkit, CODESYS Embedded Target Visu Toolkit, CODESYS Remote Target Visu Toolkit, CODESYS Control for BeagleBone SL, CODESYS Control for Beckhoff CX9020 SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, COD
eckhoff CX9020 SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL, CODESYS Edge Gateway for Linux Problem Types: CWE-822 Description: An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request. The accesses can subsequently lead to local overwriting of memory in the CmpTraceMgr, whereby the attacker can neither gain the values read internally nor control the values to be written. If invalid memory is accessed, this results in a c
gain the values read internally nor control the values to be written. If invalid memory is accessed, this results in a crash. Additional Analyst Notes: - CVE Program Container: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17093&token=15cd8424832ea10dcd4873a409a09a539ee381ca&download=
CVE ID: CVE-2022-22515 State: PUBLISHED Published: 2022-04-07T18:21:16.280553Z Last Updated: 2024-09-16T17:59:22.215Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: CODESYS Products: CODESYS Control RTE (SL), CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control Win (SL), CODESYS HMI (SL), CODESYS Development System V3, CODESYS Control Runtime System Toolkit, CODESYS Embedded Target Visu Toolkit, CODESYS Remote Target Visu Toolkit, CODESYS Control for BeagleBone SL, CODESYS Control for Beckhoff CX9020 SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC
SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL Problem Types: CWE-668 Description: A remote, authenticated attacker could utilize the control program of the CODESYS Control runtime system to use the vulnerability in order to read and modify the configuration file(s) of the affected products. Additional Analyst Notes: - CVE Program Container: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17089&token=cc5041e24fc744a397a6f6e3b78200a40e6fcd53&download=
CVE ID: CVE-2022-22516 State: PUBLISHED Published: 2022-04-07T18:21:18.417075Z Last Updated: 2024-09-17T01:05:35.627Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: CODESYS Products: CODESYS Control RTE (SL), CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control Win (SL), CODESYS Development System V3 Problem Types: CWE-732 Description: The SysDrv3S driver in the CODESYS Control runtime system on Microsoft Windows allows any system user to read and write within restricted memory space. Additional Analyst Notes: - CVE Program Container: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17090&token=6cd08b169916366df31388d2e7ba58e7bce9
eferences: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17090&token=6cd08b169916366df31388d2e7ba58e7bce93508&download=
CVE ID: CVE-2022-22517 State: PUBLISHED Published: 2022-04-07T18:21:20.091353Z Last Updated: 2024-09-16T22:16:04.923Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: CODESYS Products: CODESYS Control RTE (SL), CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control Win (SL), CODESYS Gateway, CODESYS Edge Gateway for Windows, CODESYS HMI (SL), CODESYS Development System V3, CODESYS Control Runtime System Toolkit, CODESYS Embedded Target Visu Toolkit, CODESYS Remote Target Visu Toolkit, CODESYS Control for BeagleBone SL, CODESYS Control for Beckhoff CX9020 SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, COD
eckhoff CX9020 SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL, CODESYS Edge Gateway for Linux, CODESYS OPC DA Server SL, CODESYS PLCHandler Problem Types: CWE-334 Description: An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a valid channel ID and injecting packets. This results in the communication channel to be closed. Additional Analyst Notes: - CVE Program Container: References: - https://custo
n the communication channel to be closed. Additional Analyst Notes: - CVE Program Container: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17091&token=c450f8bbbd838c647d102f359356386c6ea5aeca&download=
CVE ID: CVE-2022-22518 State: PUBLISHED Published: 2022-04-07T18:21:21.950776Z Last Updated: 2024-09-17T02:11:34.421Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: CODESYS Products: CODESYS Control for BeagleBone SL, CODESYS Control for Beckhoff CX9020 SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL, CODESYS Control Runtime System Toolkit Problem Types: CWE-276 Description: A bug in CmpUserMgr component can lead to only partially applied security policies. This
em Types: CWE-276 Description: A bug in CmpUserMgr component can lead to only partially applied security policies. This can result in enabled, anonymous access to components part of the applied security policy. Additional Analyst Notes: - CVE Program Container: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17092&token=a556b1695843bb42084dc63d5bdf553ca02ea393&download=
CVE ID: CVE-2022-22519 State: PUBLISHED Published: 2022-04-07T18:21:23.764420Z Last Updated: 2024-09-17T03:22:45.345Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: CODESYS Products: CODESYS Control RTE (SL), CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control Win (SL), CODESYS HMI (SL), CODESYS Control Runtime System Toolkit, CODESYS Embedded Target Visu Toolkit, CODESYS Remote Target Visu Toolkit, CODESYS Control for BeagleBone SL, CODESYS Control for Beckhoff CX9020 SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLC
SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL Problem Types: CWE-126 Description: A remote, unauthenticated attacker can send a specific crafted HTTP or HTTPS requests causing a buffer over-read resulting in a crash of the webserver of the CODESYS Control runtime system. Additional Analyst Notes: - CVE Program Container: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17094&token=2fb188e2213c74194e81ba61ff99f1c68602ba4d&download=
CVE ID: CVE-2022-22520 State: PUBLISHED Published: 2022-09-14T14:05:30.024889Z Last Updated: 2024-09-17T04:14:21.926Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: MB connect line, Helmholz Products: mymbCONNECT24, mbCONNECT24, myREX24, myREX24.virtual Problem Types: CWE-204 Description: A remote, unauthenticated attacker can enumerate valid users by sending specific requests to the webservice of MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en/advisories/VDE-2022-039 - https://cert.vde.com/en/advisori
CVE Program Container: References: - https://cert.vde.com/en/advisories/VDE-2022-039 - https://cert.vde.com/en/advisories/VDE-2022-011
CVE ID: CVE-2022-22521 State: PUBLISHED Published: 2022-04-27T15:15:36.343337Z Last Updated: 2024-09-16T17:34:05.874Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Miele Products: Benchmark Programming Tool Problem Types: CWE-732 Description: In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick a user with administrative privileges to execute these binaries as admin. Additional Analyst Notes: - CVE Program Container: References: - https://www.miele.de/p/miele-benchmark-programming-tool-2296.htm - http://seclists.or
E Program Container: References: - https://www.miele.de/p/miele-benchmark-programming-tool-2296.htm - http://seclists.org/fulldisclosure/2022/Apr/42 - http://packetstormsecurity.com/files/166881/Miele-Benchmark-Programming-Tool-1.1.49-1.2.71-Privilege-Escalation.html - https://cert.vde.com/en/advisories/VDE-2022-015/
CVE ID: CVE-2022-22522 State: PUBLISHED Published: 2022-09-28T13:45:28.000Z Last Updated: 2025-05-21T14:37:59.658Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Carlo Gavazzi Products: UWP 3.0 Monitoring Gateway and Controller, UWP 3.0 Monitoring Gateway and Controller – Security Enhanced, UWP 3.0 Monitoring Gateway and Controller – EDP version, CPY Car Park Server Problem Types: CWE-798 Description: In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 a remote, unauthenticated attacker could make use of hard-coded credentials to gain full access to the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP
hard-coded credentials to gain full access to the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2022-029/
CVE ID: CVE-2022-22523 State: PUBLISHED Published: 2022-09-28T13:45:29.000Z Last Updated: 2025-05-21T14:37:40.839Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Carlo Gavazzi Products: UWP 3.0 Monitoring Gateway and Controller, UWP 3.0 Monitoring Gateway and Controller – Security Enhanced, UWP 3.0 Monitoring Gateway and Controller – EDP version, CPY Car Park Server Problem Types: CWE-287 Description: An improper authentication vulnerability exists in the Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 Web-App which allows an authentication bypass to the context of an unauthorised user if free-access is disabled. Additional
App which allows an authentication bypass to the context of an unauthorised user if free-access is disabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2022-029/
CVE ID: CVE-2022-22524 State: PUBLISHED Published: 2022-09-28T13:45:30.000Z Last Updated: 2025-05-21T14:37:14.217Z Severity: CRITICAL (CVSS 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H) Vendors: Carlo Gavazzi Products: UWP 3.0 Monitoring Gateway and Controller, UWP 3.0 Monitoring Gateway and Controller – Security Enhanced, UWP 3.0 Monitoring Gateway and Controller – EDP version, CPY Car Park Server Problem Types: CWE-89 Description: In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 an unauthenticated remote attacker could utilize a SQL-Injection vulnerability to gain full database access, modify users and stop services . Additional Analyst Notes: - CVE
L-Injection vulnerability to gain full database access, modify users and stop services . Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2022-029/
CVE ID: CVE-2022-22525 State: PUBLISHED Published: 2022-09-28T13:45:30.000Z Last Updated: 2025-05-21T14:36:52.620Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Carlo Gavazzi Products: UWP 3.0 Monitoring Gateway and Controller, UWP 3.0 Monitoring Gateway and Controller – Security Enhanced, UWP 3.0 Monitoring Gateway and Controller – EDP version, CPY Car Park Server Problem Types: CWE-20 Description: In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 an remote attacker with admin rights could execute arbitrary commands due to missing input sanitization in the backup restore function Additional Analyst Notes: - CVE Program Co
ary commands due to missing input sanitization in the backup restore function Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2022-029/
CVE ID: CVE-2022-22526 State: PUBLISHED Published: 2022-09-28T13:45:31.000Z Last Updated: 2025-05-21T14:35:22.971Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Carlo Gavazzi Products: UWP 3.0 Monitoring Gateway and Controller, UWP 3.0 Monitoring Gateway and Controller – Security Enhanced, UWP 3.0 Monitoring Gateway and Controller – EDP version, CPY Car Park Server Problem Types: CWE-306 Description: In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 a missing authentication allows for full access via API. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/a
API. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2022-029/
CVE ID: CVE-2022-22528 State: PUBLISHED Published: 2022-02-09T22:05:19 Last Updated: 2024-08-03T03:14:55.465Z Vendors: SAP SE Products: SAP Adaptive Server Enterprise Problem Types: CWE-427 Description: SAP Adaptive Server Enterprise (ASE) - version 16.0, installation makes an entry in the system PATH environment variable in Windows platform which, under certain conditions, allows a Standard User to execute malicious Windows binaries which may lead to privilege escalation on the local system. The issue is with the ASE installer and does not impact other ASE binaries. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/3140564 - https://w
onal Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/3140564 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2022-22529 State: PUBLISHED Published: 2022-01-14T19:11:30 Last Updated: 2024-08-03T03:14:55.469Z Vendors: SAP SE Products: SAP Enterprise Threat Detection Problem Types: Cross-Site Scripting Description: SAP Enterprise Threat Detection (ETD) - version 2.0, does not sufficiently encode user-controlled inputs which may lead to an unauthorized attacker possibly exploit XSS vulnerability. The UIs in ETD are using SAP UI5 standard controls, the UI5 framework provides automated output encoding for its standard controls. This output encoding prevents stored malicious user input from being executed when it is reflected in the UI. Additional Analyst Notes: - CVE Program Container: Refere
user input from being executed when it is reflected in the UI. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=596902035 - https://launchpad.support.sap.com/#/notes/3124597
CVE ID: CVE-2022-22530 State: PUBLISHED Published: 2022-01-14T19:11:26 Last Updated: 2024-08-03T03:14:55.426Z Vendors: SAP SE Products: SAP S/4HANA Problem Types: Code Injection Description: The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files. This allows an attacker with basic user rights to inject dangerous content or malicious code which could result in critical information being modified or completely compromise the availability of the application. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/3112928 - https://wiki.scn.sap.com/wiki
- CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/3112928 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=596902035