Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-22531 State: PUBLISHED Published: 2022-01-14T19:11:28 Last Updated: 2024-08-03T03:14:55.412Z Vendors: SAP SE Products: SAP S/4HANA Problem Types: Cross-Site Scripting Description: The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files. This allows an attacker with basic user rights to run arbitrary script code, resulting in sensitive information being disclosed or modified. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/3112928 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=596902035
CVE ID: CVE-2022-22532 State: PUBLISHED Published: 2022-02-09T22:05:19 Last Updated: 2024-08-03T03:14:55.440Z Vendors: SAP SE Products: SAP NetWeaver Application Server Java Problem Types: CWE-444 Description: In SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22, 7.22EXT, 7.49, 7.53, KERNEL 7.22, 7.49, 7.53, an unauthenticated attacker could submit a crafted HTTP server request which triggers improper shared memory buffer handling. This could allow the malicious payload to be executed and hence execute functions that could be impersonating the victim or even steal the victim's logon session. Additional Analyst Notes: - CVE Program Container: Refer
ersonating the victim or even steal the victim's logon session. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/3123427 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2022-22533 State: PUBLISHED Published: 2022-02-09T22:05:20 Last Updated: 2024-08-03T03:14:55.480Z Vendors: SAP SE Products: SAP NetWeaver Application Server Java Problem Types: CWE-416 Description: Due to improper error handling in SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22, 7.22EXT, 7.49, 7.53, KERNEL 7.22, 7.49, 7.53, an attacker could submit multiple HTTP server requests resulting in errors, such that it consumes the memory buffer. This could result in system shutdown rendering the system unavailable. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/3123427 - https://w
onal Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/3123427 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2022-22534 State: PUBLISHED Published: 2022-02-09T22:05:21 Last Updated: 2024-08-03T03:14:55.475Z Vendors: SAP SE Products: SAP NetWeaver (ABAP and Java application Servers) Problem Types: Cross-Site Scripting Description: Due to insufficient encoding of user input, SAP NetWeaver allows an unauthenticated attacker to inject code that may expose sensitive data like user ID and password. These endpoints are normally exposed over the network and successful exploitation can partially impact confidentiality of the application. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/3124994 - https://www.sap.com/documents/2022/02/fa865
Container: References: - https://launchpad.support.sap.com/#/notes/3124994 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2022-22535 State: PUBLISHED Published: 2022-02-09T22:05:21 Last Updated: 2024-08-03T03:14:55.475Z Vendors: SAP SE Products: SAP ERP HCM (Portugal) Problem Types: CWE-862 Description: SAP ERP HCM Portugal - versions 600, 604, 608, does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affected report only reads the payroll information, the attacker can neither modify any information nor cause availability impacts. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/3126489 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.htm
unchpad.support.sap.com/#/notes/3126489 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2022-22536 State: PUBLISHED Published: 2022-02-09T22:05:24.000Z Last Updated: 2025-10-21T23:15:47.646Z Vendors: SAP SE Products: SAP NetWeaver and ABAP Platform, SAP Web Dispatcher, SAP Content Server Problem Types: CWE-444 Description: SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for request smuggling and request concatenation. An unauthenticated attacker can prepend a victim's request with arbitrary data. This way, the attacker can execute functions impersonating the victim or poison intermediary Web caches. A successful attack could result in complete compromise of Con
personating the victim or poison intermediary Web caches. A successful attack could result in complete compromise of Confidentiality, Integrity and Availability of the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://launchpad.support.sap.com/#/notes/3123396 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2022-22537 State: PUBLISHED Published: 2022-02-09T22:05:22 Last Updated: 2024-08-03T03:14:55.469Z Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: CWE-20 Description: When a user opens a manipulated Tagged Image File Format (.tiff, 2d.x3d)) received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE relevant information can be found below. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/3134684 - https://www.sap.com/documents/20
VE Program Container: References: - https://launchpad.support.sap.com/#/notes/3134684 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2022-22538 State: PUBLISHED Published: 2022-02-09T22:05:23 Last Updated: 2024-08-03T03:14:55.437Z Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: CWE-20 Description: When a user opens a manipulated Adobe Illustrator file format (.ai, ai.x3d) received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE relevant information can be found below. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/3134684 - https://www.sap.com/documents/
CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/3134684 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2022-22539 State: PUBLISHED Published: 2022-02-09T22:05:25 Last Updated: 2024-08-03T03:14:55.440Z Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: CWE-20 Description: When a user opens a manipulated JPEG file format (.jpg, 2d.x3d) received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE relevant information can be found below. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/3134684 - https://www.sap.com/documents/2022/02/fa86
Container: References: - https://launchpad.support.sap.com/#/notes/3134684 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2022-22540 State: PUBLISHED Published: 2022-02-09T22:05:24 Last Updated: 2024-08-03T03:14:55.486Z Vendors: SAP SE Products: SAP NetWeaver AS ABAP (Workplace Server) Problem Types: CWE-89 Description: SAP NetWeaver AS ABAP (Workplace Server) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 787, allows an attacker to execute crafted database queries, that could expose the backend database. Successful attacks could result in disclosure of a table of contents from the system, but no risk of modification possible. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/3140587 - https://www.sap.com/documents/2022
Program Container: References: - https://launchpad.support.sap.com/#/notes/3140587 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2022-22541 State: PUBLISHED Published: 2022-04-12T16:11:25 Last Updated: 2024-08-03T03:14:55.643Z Vendors: SAP SE Products: SAP BusinessObjects Business Intelligence Platform Problem Types: CWE-213 Description: SAP BusinessObjects Business Intelligence Platform - versions 420, 430, may allow legitimate users to access information they shouldn't see through relational or OLAP connections. The main impact is the disclosure of company data to people that shouldn't or don't need to have access. Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/313
/www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3137191
CVE ID: CVE-2022-22542 State: PUBLISHED Published: 2022-02-09T22:05:26 Last Updated: 2024-08-03T03:14:55.572Z Vendors: SAP SE Products: SAP S/4HANA (Supplier Factsheet and Enterprise Search for Business Partner, Supplier and Customer) Problem Types: CWE-200 Description: S/4HANA Supplier Factsheet exposes the private address and bank details of an Employee Business Partner with Supplier Role, AND Enterprise Search for Customer, Supplier and Business Partner objects exposes the private address fields of Employee Business Partners, to an actor that is not explicitly authorized to have access to that information, which could compromise Confidentiality. Additional Analyst Notes: - CVE Program Con
to have access to that information, which could compromise Confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/3142092 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2022-22543 State: PUBLISHED Published: 2022-02-09T22:05:27 Last Updated: 2024-08-03T03:14:55.768Z Vendors: SAP SE Products: SAP NetWeaver Application Server for ABAP (Kernel) and ABAP Platform (Kernel) Problem Types: CWE-400 Description: SAP NetWeaver Application Server for ABAP (Kernel) and ABAP Platform (Kernel) - versions KERNEL 7.22, 8.04, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, KRNL64UC 8.04, 7.22, 7.22EXT, 7.49, 7.53, KRNL64NUC 7.22, 7.22EXT, 7.49, does not sufficiently validate sap-passport information, which could lead to a Denial-of-Service attack. This allows an unauthorized remote user to provoke a breakdown of the SAP Web Dispatcher or Kernel work process. The crash
is allows an unauthorized remote user to provoke a breakdown of the SAP Web Dispatcher or Kernel work process. The crashed process can be restarted immediately, other processes are not affected. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/3116223 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2022-22544 State: PUBLISHED Published: 2022-02-09T22:05:29 Last Updated: 2024-08-03T03:14:55.720Z Vendors: SAP SE Products: SAP Solution Manager (Diagnostics Root Cause Analysis Tools) Problem Types: CW-653 Description: Solution Manager (Diagnostics Root Cause Analysis Tools) - version 720, allows an administrator to execute code on all connected Diagnostics Agents and browse files on their systems. An attacker could thereby control the managed systems. It is considered that this is a missing segregation of duty for the SAP Solution Manager administrator. Impacts of unauthorized execution of commands can lead to sensitive information disclosure, loss of system integrity and denia
s of unauthorized execution of commands can lead to sensitive information disclosure, loss of system integrity and denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/3140940 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2022-22545 State: PUBLISHED Published: 2022-02-09T22:05:27 Last Updated: 2024-08-03T03:14:55.827Z Vendors: SAP SE Products: SAP NetWeaver Application Server ABAP and ABAP Platform Problem Types: CWE-200 Description: A high privileged user who has access to transaction SM59 can read connection details stored with the destination for http calls in SAP NetWeaver Application Server ABAP and ABAP Platform - versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/3128473 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2022-22546 State: PUBLISHED Published: 2022-02-09T22:05:28 Last Updated: 2024-08-03T03:14:55.748Z Vendors: SAP SE Products: SAP Business Objects Web Intelligence (BI Launchpad) Problem Types: CWE-79 Description: Due to improper HTML encoding in input control summary, an authorized attacker can execute XSS vulnerability in SAP Business Objects Web Intelligence (BI Launchpad) - version 420. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/3126748 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2022-22547 State: PUBLISHED Published: 2022-03-08T13:36:11 Last Updated: 2024-08-03T03:14:55.753Z Vendors: SAP SE Products: Simple Diagnostics Agent Problem Types: CWE-200 Description: Simple Diagnostics Agent - versions 1.0 (up to version 1.57.), allows an attacker to access information which would otherwise be restricted via a random port 9000-65535. This allows information gathering which could be used exploit future open-source security exploits. Additional Analyst Notes: - CVE Program Container: References: - https://dam.sap.com/mac/embed/public/pdf/a/ucQrx6G.htm?rc=10 - https://launchpad.support.sap.com/#/notes/3147102 - http://seclists.org/fulldisclosure/2022/Jun/40 - http
6G.htm?rc=10 - https://launchpad.support.sap.com/#/notes/3147102 - http://seclists.org/fulldisclosure/2022/Jun/40 - http://packetstormsecurity.com/files/167562/SAP-FRUN-Simple-Diagnostics-Agent-1.0-Information-Disclosure.html
CVE ID: CVE-2022-22549 State: PUBLISHED Published: 2022-04-12T17:50:39.546422Z Last Updated: 2024-09-16T23:01:08.780Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-295 Description: Dell PowerScale OneFS, 8.2.x-9.3.x, contains a Improper Certificate Validation. A unauthenticated remote attacker could potentially exploit this vulnerability, leading to a man-in-the-middle capture of administrative credentials. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000195815/dsa-2022-002-dell-emc-powerscale-onefs-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2022-22550 State: PUBLISHED Published: 2022-04-12T17:50:41.229041Z Last Updated: 2024-09-17T00:26:01.590Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-549 Description: Dell PowerScale OneFS, versions 8.2.2 and above, contain a password disclosure vulnerability. An unprivileged local attacker could potentially exploit this vulnerability, leading to account take over. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000195815
CVE ID: CVE-2022-22551 State: PUBLISHED Published: 2022-01-21T20:15:20.289024Z Last Updated: 2024-09-16T20:47:39.053Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H) Vendors: Dell Products: AppSync Problem Types: CWE-598 Description: DELL EMC AppSync versions 3.9 to 4.3 use GET request method with sensitive query strings. An Adjacent, unauthenticated attacker could potentially exploit this vulnerability, and hijack the victim session. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000195377
CVE ID: CVE-2022-22552 State: PUBLISHED Published: 2022-01-21T20:15:21.743821Z Last Updated: 2024-09-17T01:36:17.536Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:H) Vendors: Dell Products: AppSync Problem Types: CWE-1021 Description: Dell EMC AppSync versions 3.9 to 4.3 contain a clickjacking vulnerability in AppSync. A remote unauthenticated attacker could potentially exploit this vulnerability to trick the victim into executing state changing operations. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000195377
CVE ID: CVE-2022-22553 State: PUBLISHED Published: 2022-01-21T20:15:23.554937Z Last Updated: 2024-09-16T20:27:34.596Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: AppSync Problem Types: CWE-307 Description: Dell EMC AppSync versions 3.9 to 4.3 contain an Improper Restriction of Excessive Authentication Attempts Vulnerability that can be exploited from UI and CLI. An adjacent unauthenticated attacker could potentially exploit this vulnerability, leading to password brute-forcing. Account takeover is possible if weak passwords are used by users. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/
are used by users. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000195377
CVE ID: CVE-2022-22554 State: PUBLISHED Published: 2022-01-24T20:10:25.283464Z Last Updated: 2024-09-16T20:36:32.257Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: Dell Products: DellEMC System Update - DSU Problem Types: CWE-256 Description: Dell EMC System Update, version 1.9.2 and prior, contain an Unprotected Storage of Credentials vulnerability. A local attacker with user privleges could potentially exploit this vulnerability leading to the disclosure of user passwords. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000195007
CVE ID: CVE-2022-22555 State: PUBLISHED Published: 2022-07-20T20:55:14.252577Z Last Updated: 2024-09-16T19:47:30.743Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: Dell Products: PowerStore Problem Types: CWE-78 Description: Dell EMC PowerStore, contains an OS command injection Vulnerability. A locally authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the PowerStore underlying OS, with the privileges of the vulnerable application. Exploitation may lead to an elevation of privilege. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/0002012
f privilege. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000201283
CVE ID: CVE-2022-22556 State: PUBLISHED Published: 2022-06-02T21:00:20.337640Z Last Updated: 2024-09-17T00:05:37.571Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Dell Products: PowerStore Problem Types: CWE-400 Description: Dell PowerStore contains an Uncontrolled Resource Consumption Vulnerability in PowerStore User Interface. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000196367
CVE ID: CVE-2022-22557 State: PUBLISHED Published: 2022-06-02T21:00:22.216944Z Last Updated: 2024-09-16T19:46:36.557Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Dell Products: PowerStore Problem Types: CWE-256 Description: PowerStore contains Plain-Text Password Storage Vulnerability in PowerStore X & T environments running versions 2.0.0.x and 2.0.1.x A locally authenticated attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account. Additional Analyst Notes: - CVE Progr
s to access the vulnerable application with privileges of the compromised account. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000196367
CVE ID: CVE-2022-22558 State: PUBLISHED Published: 2022-04-21T20:50:13.669444Z Last Updated: 2024-09-17T01:56:31.669Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: Dell Products: PowerEdge Platform Problem Types: CWE-119 Description: Dell PowerEdge Server BIOS and Dell Precision Workstation 7910 and 7920 Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A Local High Privileged attacker could potentially exploit this vulnerability leading to arbitrary writes or denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000197971
CVE ID: CVE-2022-22559 State: PUBLISHED Published: 2022-04-12T17:50:42.600570Z Last Updated: 2024-09-16T16:44:04.745Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-327 Description: Dell PowerScale OneFS, version 9.3.0, contains a use of a broken or risky cryptographic algorithm. An unprivileged network attacker could exploit this vulnerability, leading to the potential for information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000195815
CVE ID: CVE-2022-22560 State: PUBLISHED Published: 2022-04-12T17:50:44.227555Z Last Updated: 2024-09-16T21:04:34.773Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-798 Description: Dell EMC PowerScale OneFS 8.1.x - 9.1.x contain hard coded credentials. This allows a local user with knowledge of the credentials to login as the admin user to the backend ethernet switch of a PowerScale cluster. The attacker can exploit this vulnerability to take the switch offline. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000195815
CVE ID: CVE-2022-22561 State: PUBLISHED Published: 2022-04-12T17:50:45.767461Z Last Updated: 2024-09-16T19:50:45.537Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-307 Description: Dell PowerScale OneFS, versions 8.2.x-9.3.0.x, contain an improper restriction of excessive authentication attempts. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to compromised accounts. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000195815
CVE ID: CVE-2022-22562 State: PUBLISHED Published: 2022-04-12T17:50:47.113538Z Last Updated: 2024-09-17T03:08:08.320Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-229 Description: Dell PowerScale OneFS, versions 8.2.0-9.3.0, contain a improper handling of missing values exploit. An unauthenticated network attacker could potentially exploit this denial-of-service vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000195815