Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
2/01/18/2 - https://www.debian.org/security/2022/dsa-5050 - https://security.netapp.com/advisory/ntap-20220217-0002/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FCR3LIRUEXR7CA63W5M2HT3K63MZGKBR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z5VTIZZUPC73IEJNZX66BY2YCBRZAELB/ - http://www.openwall.com/lists/oss-security/2022/06/01/1 - http://www.openwall.com/lists/oss-security/2022/06/04/3 - http://www.openwall.com/lists/oss-security/2022/06/07/3 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=64620e0a1e712a778095bd35cbb277dc2259281f - https://bugzilla.suse.c
g/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=64620e0a1e712a778095bd35cbb277dc2259281f - https://bugzilla.suse.com/show_bug.cgi?id=1194765
CVE ID: CVE-2022-23223 State: PUBLISHED Published: 2022-01-25T13:00:22 Last Updated: 2024-08-03T03:36:20.334Z Vendors: Apache Software Foundation Products: Apache ShenYu (incubating) Problem Types: CWE-522 Description: On Apache ShenYu versions 2.4.0 and 2.4.1, and endpoint existed that disclosed the passwords of all users. Users are recommended to upgrade to version 2.4.2 or later. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/q2gg6ny6lpkph7nkrvjzqdvqpm805v8s - http://www.openwall.com/lists/oss-security/2022/01/25/7 - http://www.openwall.com/lists/oss-security/2022/01/26/4
CVE ID: CVE-2022-23227 State: PUBLISHED Published: 2022-01-14T17:13:57.000Z Last Updated: 2025-10-21T23:15:48.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: NUUO NVRmini2 through 3.11 allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users because of the lack of handle_import_user.php authentication. When combined with another flaw (CVE-2011-5325), it is possible to overwrite arbitrary files under the web root and achieve code execution as root. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pedrib/PoC/blob/master/advisories/NUUO/nuuo_nvrmini_round2.mkd - h
SA ADP Vulnrichment: References: - https://github.com/pedrib/PoC/blob/master/advisories/NUUO/nuuo_nvrmini_round2.mkd - https://github.com/rapid7/metasploit-framework/pull/16044 - https://portswigger.net/daily-swig/researcher-discloses-alleged-zero-day-vulnerabilities-in-nuuo-nvrmini2-recording-device - https://news.ycombinator.com/item?id=29936569
CVE ID: CVE-2022-23228 State: PUBLISHED Published: 2022-02-18T21:50:04 Last Updated: 2024-08-03T03:36:20.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pexip Infinity before 27.0 has improper WebRTC input validation. An unauthenticated remote attacker can use excessive resources, temporarily causing denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://docs.pexip.com/admin/security_bulletins.htm
CVE ID: CVE-2022-23232 State: PUBLISHED Published: 2022-03-04T17:21:50 Last Updated: 2024-08-03T03:36:20.370Z Vendors: n/a Products: StorageGRID (formerly StorageGRID Webscale) Problem Types: Access Bypass Description: StorageGRID (formerly StorageGRID Webscale) versions prior to 11.6.0 are susceptible to a vulnerability which when successfully exploited could allow disabled, expired, or locked external user accounts to access S3 data to which they previously had access. StorageGRID 11.6.0 obtains the user account status from Active Directory or Azure and will block S3 access for disabled user accounts during the subsequent background synchronization. User accounts that are expired or locked
ss for disabled user accounts during the subsequent background synchronization. User accounts that are expired or locked for Active Directory or Azure, or user accounts that are disabled, expired, or locked in identity sources other than Active Directory or Azure must be manually removed from group memberships or have their S3 keys manually removed from Tenant Manager in all versions of StorageGRID (formerly StorageGRID Webscale). Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/NTAP-20220303-0009/
CVE ID: CVE-2022-23233 State: PUBLISHED Published: 2022-03-04T17:22:54 Last Updated: 2024-08-03T03:36:20.451Z Vendors: n/a Products: StorageGRID (formerly StorageGRID Webscale) Problem Types: Denial of Service Description: StorageGRID (formerly StorageGRID Webscale) versions prior to 11.6.0 are susceptible to a vulnerability which when successfully exploited could lead to Denial of Service (DoS) of the Local Distribution Router (LDR) service. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/NTAP-20220303-0010/
CVE ID: CVE-2022-23234 State: PUBLISHED Published: 2022-03-16T14:12:31 Last Updated: 2024-08-03T03:36:20.363Z Vendors: n/a Products: SnapCenter Problem Types: Disclosure of Sensitive Information Description: SnapCenter versions prior to 4.5 are susceptible to a vulnerability which could allow a local authenticated attacker to discover plaintext HANA credentials. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20220228-0001/
CVE ID: CVE-2022-23235 State: PUBLISHED Published: 2022-08-25T17:25:48 Last Updated: 2024-08-03T03:36:20.316Z Vendors: n/a Products: Active IQ Unified Manager Problem Types: Information Disclosure Description: Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.10P1 are susceptible to a vulnerability which could allow an attacker to discover cluster, node and Active IQ Unified Manager specific information via AutoSupport telemetry data that is sent even when AutoSupport has been disabled. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20220324-0001/
CVE ID: CVE-2022-23236 State: PUBLISHED Published: 2022-06-01T13:46:06 Last Updated: 2024-08-03T03:36:20.364Z Vendors: n/a Products: E-Series SANtricity OS Controller Software 11.x Problem Types: Information Disclosure Description: E-Series SANtricity OS Controller Software versions 11.40 through 11.70.2 store the LDAP BIND password in plaintext within a file accessible only to privileged users. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/NTAP-20220527-0001/
CVE ID: CVE-2022-23237 State: PUBLISHED Published: 2022-06-01T13:54:46 Last Updated: 2024-08-03T03:36:20.314Z Vendors: n/a Products: E-Series SANtricity OS Controller Software 11.x Problem Types: Host Header Injection Description: E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks that could allow an attacker to redirect users to malicious websites. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/NTAP-20220527-0002/
CVE ID: CVE-2022-23238 State: PUBLISHED Published: 2022-08-09T20:18:39 Last Updated: 2024-08-03T03:36:20.162Z Vendors: n/a Products: StorageGRID (formerly StorageGRID Webscale) Problem Types: Improper Access Control Description: Linux deployments of StorageGRID (formerly StorageGRID Webscale) versions 11.6.0 through 11.6.0.2 deployed with a Linux kernel version less than 4.7.0 are susceptible to a vulnerability which could allow a remote unauthenticated attacker to view limited metrics information and modify alert email recipients and content. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/NTAP-20220808-0001/
CVE ID: CVE-2022-23239 State: PUBLISHED Published: 2023-02-28T00:00:00 Last Updated: 2024-08-03T03:36:20.322Z Vendors: n/a Products: Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows Problem Types: Stored Cross-Site Scripting (XSS) Description: Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.11P1 are susceptible to a vulnerability which allows administrative users to perform a Stored Cross-Site Scripting (XSS) attack. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20220901-0001/
CVE ID: CVE-2022-23240 State: PUBLISHED Published: 2023-02-28T00:00:00.000Z Last Updated: 2025-03-18T15:08:20.537Z Vendors: n/a Products: Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows Problem Types: Improper Authorization Description: Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.11P1 are susceptible to a vulnerability which allows unauthorized users to update EMS Subscriptions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.netapp.com/advisory/ntap-20220901-0002/
CVE ID: CVE-2022-23241 State: PUBLISHED Published: 2022-10-19T00:00:00.000Z Last Updated: 2025-05-09T14:54:11.754Z Vendors: n/a Products: Clustered Data ONTAP Problem Types: Arbitrary Data Modification Description: Clustered Data ONTAP versions 9.11.1 through 9.11.1P2 with SnapLock configured FlexGroups are susceptible to a vulnerability which could allow an authenticated remote attacker to arbitrarily modify or delete WORM data prior to the end of the retention period. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.netapp.com/advisory/ntap-20221017-0001/
CVE ID: CVE-2022-23242 State: PUBLISHED Published: 2022-03-23T15:18:25.048063Z Last Updated: 2024-09-16T16:12:44.258Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: TeamViewer Products: TeamViewer for Linux Problem Types: N/A Description: TeamViewer Linux versions before 15.28 do not properly execute a deletion command for the connection password in case of a process crash. Knowledge of the crash event and the TeamViewer ID as well as either possession of the pre-crash connection password or local authenticated access to the machine would have allowed to establish a remote connection by reusing the not properly deleted connection password. Additional Analys
have allowed to establish a remote connection by reusing the not properly deleted connection password. Additional Analyst Notes: - CVE Program Container: References: - https://www.teamviewer.com/en/trust-center/security-bulletins/TV-2022-1001/
CVE ID: CVE-2022-23252 State: PUBLISHED Published: 2022-02-09T16:37:10 Last Updated: 2025-01-02T18:28:25.195Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2021, Microsoft Office 2016, Microsoft Office 2013 Service Pack 1 Problem Types: Information Disclosure Description: Microsoft Office Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23252
CVE ID: CVE-2022-23253 State: PUBLISHED Published: 2022-03-09T17:06:51 Last Updated: 2025-07-08T15:31:43.501Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 R2 Service Pack
2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Denial of Service Description: Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23253
CVE ID: CVE-2022-23254 State: PUBLISHED Published: 2022-02-09T16:37:12 Last Updated: 2025-01-02T18:28:06.151Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: PowerBI-client JS SDK Problem Types: Information Disclosure Description: Microsoft Power BI Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23254
CVE ID: CVE-2022-23255 State: PUBLISHED Published: 2022-02-09T16:37:13 Last Updated: 2025-01-02T18:28:25.750Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: OneDrive for Android Problem Types: Security Feature Bypass Description: Microsoft OneDrive for Android Security Feature Bypass Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23255
CVE ID: CVE-2022-23256 State: PUBLISHED Published: 2022-02-09T16:37:15 Last Updated: 2025-01-02T18:28:26.994Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Azure Data Explorer Problem Types: Elevation of Privilege Description: Azure Data Explorer Spoofing Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23256
CVE ID: CVE-2022-23257 State: PUBLISHED Published: 2022-04-15T19:02:50 Last Updated: 2025-01-02T18:51:07.375Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 11 version 22H2, Windows 10 Version 21H1, Windows Server 2022, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2 Problem Types: Remote Code Execution Description: Windows Hyper-V Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23257
CVE ID: CVE-2022-23258 State: PUBLISHED Published: 2022-01-25T21:23:16 Last Updated: 2025-01-02T18:23:10.681Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge for Android Problem Types: Spoofing Description: Microsoft Edge for Android Spoofing Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23258
CVE ID: CVE-2022-23259 State: PUBLISHED Published: 2022-04-15T19:02:52 Last Updated: 2025-01-02T18:51:04.256Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Dynamics 365 (on-premises) version 9.0, Microsoft Dynamics 365 (on-premises) version 9.1 Problem Types: Remote Code Execution Description: Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23259
CVE ID: CVE-2022-23261 State: PUBLISHED Published: 2022-02-07T17:10:12 Last Updated: 2025-01-02T18:28:09.932Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (Chromium-based) Problem Types: Tampering Description: Microsoft Edge (Chromium-based) Tampering Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23261
CVE ID: CVE-2022-23262 State: PUBLISHED Published: 2022-02-07T17:10:13 Last Updated: 2025-01-02T18:28:10.549Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (Chromium-based) Problem Types: Elevation of Privilege Description: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23262
CVE ID: CVE-2022-23263 State: PUBLISHED Published: 2022-02-07T17:10:15 Last Updated: 2025-01-02T18:28:11.106Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (Chromium-based) Problem Types: Elevation of Privilege Description: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23263
CVE ID: CVE-2022-23264 State: PUBLISHED Published: 2023-06-29T04:25:21.701Z Last Updated: 2025-01-02T18:28:11.624Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (Chromium-based) Problem Types: Spoofing Description: Microsoft Edge (Chromium-based) Spoofing Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23264
CVE ID: CVE-2022-23265 State: PUBLISHED Published: 2022-03-09T17:06:52 Last Updated: 2025-07-08T15:31:16.792Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Defender for IoT Problem Types: Remote Code Execution Description: Microsoft Defender for IoT Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23265
CVE ID: CVE-2022-23266 State: PUBLISHED Published: 2022-03-09T17:06:54 Last Updated: 2025-07-08T15:31:17.587Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Defender for IoT Problem Types: Elevation of Privilege Description: Microsoft Defender for IoT Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23266
CVE ID: CVE-2022-23267 State: PUBLISHED Published: 2022-05-10T20:33:32 Last Updated: 2025-01-02T18:57:48.914Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: .NET Core 3.1, .NET 5.0, Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8), Visual Studio 2019 for Mac version 8.10, Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10), Microsoft Visual Studio 2022 version 17.0, .NET 6.0, Microsoft Visual Studio 2022 version 17.1, PowerShell 7.0, PowerShell 7.2, Visual Studio 2022 for Mac version 17.0 Problem Types: Denial of Service Description: .NET and Visual Studio Denial of Service Vulnerability Additio
ersion 17.0 Problem Types: Denial of Service Description: .NET and Visual Studio Denial of Service Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23267
CVE ID: CVE-2022-23268 State: PUBLISHED Published: 2022-04-15T19:02:54 Last Updated: 2025-01-02T18:51:03.453Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows Server 2022, Windows 11 version 21H2 Problem Types: Denial of Service Description: Windows Hyper-V Denial of Service Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23268
CVE ID: CVE-2022-23269 State: PUBLISHED Published: 2022-02-09T16:37:21 Last Updated: 2025-01-02T18:28:06.617Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Dynamics GP Problem Types: Spoofing Description: Microsoft Dynamics GP Spoofing Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23269
CVE ID: CVE-2022-23270 State: PUBLISHED Published: 2022-05-10T20:33:33 Last Updated: 2025-01-02T18:57:46.267Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Wi
ulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23270
CVE ID: CVE-2022-23271 State: PUBLISHED Published: 2022-02-09T16:37:23 Last Updated: 2025-01-02T18:28:07.161Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Dynamics GP Problem Types: Elevation of Privilege Description: Microsoft Dynamics GP Elevation Of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23271
CVE ID: CVE-2022-23272 State: PUBLISHED Published: 2022-02-09T16:37:24 Last Updated: 2025-01-02T18:28:07.697Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Dynamics GP Problem Types: Elevation of Privilege Description: Microsoft Dynamics GP Elevation Of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23272
CVE ID: CVE-2022-23273 State: PUBLISHED Published: 2022-02-09T16:37:25 Last Updated: 2025-01-02T18:28:08.287Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Dynamics GP Problem Types: Elevation of Privilege Description: Microsoft Dynamics GP Elevation Of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23273
CVE ID: CVE-2022-23274 State: PUBLISHED Published: 2022-02-09T16:37:27 Last Updated: 2025-01-02T18:28:08.895Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Dynamics GP Problem Types: Remote Code Execution Description: Microsoft Dynamics GP Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23274
CVE ID: CVE-2022-23276 State: PUBLISHED Published: 2022-02-09T16:37:28 Last Updated: 2025-01-02T18:28:09.406Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: SQL Server 2019 for Linux Containers Problem Types: Elevation of Privilege Description: SQL Server for Linux Containers Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23276