deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-31597
Published: 2022-07-12
Description: Within SAP S/4HANA - versions S4CORE 101, 102, 103, 104, 105, 106, SAPSCORE 127, the application business partner extension for Spain/Slovakia does not perform necessary authorization checks for a low privileged authenticated user over the network, resulting in escalation of privileges leading to low impact on confidentiality and integrity of the data.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: https://launchpad.support.sap.com/#/notes/3213826; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3213826
CVE: CVE-2022-31598
Published: 2022-07-12
Description: Due to insufficient input validation, SAP Business Objects - version 420, allows an authenticated attacker to submit a malicious request through an allowed operation. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-345, CWE-345
References: https://launchpad.support.sap.com/#/notes/3213279; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3213279
CVE: CVE-2022-31654
Published: 2022-07-12
Description: VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitization in configurations.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.vmware.com/security/advisories/VMSA-2022-0019.html; https://www.vmware.com/security/advisories/VMSA-2022-0019.html
CVE: CVE-2022-31655
Published: 2022-07-12
Description: VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitization in alerts.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.vmware.com/security/advisories/VMSA-2022-0019.html; https://www.vmware.com/security/advisories/VMSA-2022-0019.html
CVE: CVE-2022-32246
Published: 2022-07-12
Description: SAP Busines Objects Business Intelligence Platform (Visual Difference Application) - versions 420, 430, allows an authenticated attacker who has access to BI admin console to send crafted queries and extract data from the SQL backend. On successful exploitation, the attacker can cause limited impact on confidentiality and integrity of the application
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-89
References: https://launchpad.support.sap.com/#/notes/3203079; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3203079
CVE: CVE-2022-32247
Published: 2022-07-12
Description: SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution attack by an unauthenticated attacker due to improper sanitization of the User inputs while interacting on the Network. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/3209557; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3209557
CVE: CVE-2022-32248
Published: 2022-07-12
Description: Due to missing input validation in the Manage Checkbooks component of SAP S/4HANA - version 101, 102, 103, 104, 105, 106, an attacker could insert or edit the value of an existing field in the database. This leads to an impact on the integrity of the data.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://launchpad.support.sap.com/#/notes/3216161; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3216161
CVE: CVE-2022-32249
Published: 2022-07-12
Description: Under special integration scenario of SAP Business one and SAP HANA - version 10.0, an attacker can exploit HANA cockpit�s data volume to gain access to highly sensitive information (e.g., high privileged account credentials)
CVSS Score: 7.5 (HIGH)
CWE: CWE-668
References: https://launchpad.support.sap.com/#/notes/3212997; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3212997
CVE: CVE-2022-35168
Published: 2022-07-12
Description: Due to improper input sanitization of XML input in SAP Business One - version 10.0, an attacker can perform a denial-of-service attack rendering the system temporarily inoperative.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: https://launchpad.support.sap.com/#/notes/3211203; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3211203
CVE: CVE-2022-35169
Published: 2022-07-12
Description: SAP BusinessObjects Business Intelligence Platform (LCM) - versions 420, 430, allows an attacker with an admin privilege to read and decrypt LCMBIAR file's password under certain conditions, enabling the attacker to modify the password or import the file into another system causing high impact on confidentiality but a limited impact on the availability and integrity of the application.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-200
References: https://launchpad.support.sap.com/#/notes/3194361; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3194361
CVE: CVE-2022-35170
Published: 2022-07-12
Description: SAP NetWeaver Enterprise Portal does - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, not sufficiently encode user-controlled inputs over the network, resulting in reflected Cross-Site Scripting (XSS) vulnerability, therefore changing the scope of the attack. This leads to limited impact on confidentiality and integrity of data.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/3208819; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3208819
CVE: CVE-2022-35171
Published: 2022-07-12
Description: When a user opens manipulated JPEG 2000 (.jp2, jp2k.x3d) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE relevant information can be found below
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://launchpad.support.sap.com/#/notes/3220746; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3220746
CVE: CVE-2022-35172
Published: 2022-07-12
Description: SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting (XSS) vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/3207902; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3207902
CVE: CVE-2022-35224
Published: 2022-07-12
Description: SAP Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. This attack can be used to non-permanently deface or modify portal content. The execution of script content by a victim registered on the portal could compromise the confidentiality and integrity of victim�s web browser session.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/3210779; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3210779
CVE: CVE-2022-35225
Published: 2022-07-12
Description: SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs over the network, resulting in reflected Cross-Site Scripting (XSS) vulnerability, therefore changing the scope of the attack. This leads to limited impact on confidentiality and integrity of data.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://launchpad.support.sap.com/#/notes/3208880; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3208880
CVE: CVE-2022-35227
Published: 2022-07-12
Description: A vulnerability in SAP NW EP (WPC) - versions 7.30, 7.31, 7.40, 7.50, which does not sufficiently validate user-controlled input, allows a remote attacker to conduct a Cross-Site (XSS) scripting attack. A successful exploit could allow the attacker to execute arbitrary script code which could lead to stealing or modifying of authentication information of the user, such as data relating to his or her current session.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/3211760; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3211760
CVE: CVE-2022-35228
Published: 2022-07-12
Description: SAP BusinessObjects CMC allows an unauthenticated attacker to retrieve token information over the network which would otherwise be restricted. This can be achieved only when a legitimate user accesses the application and a local compromise occurs, like sniffing or social engineering. On successful exploitation, the attacker can completely compromise the application.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://launchpad.support.sap.com/#/notes/3221288; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3221288
CVE: CVE-2022-29600
Published: 2022-07-12
Description: The oelib (aka One is Enough Library) extension through 4.1.5 for TYPO3 allows SQL Injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://typo3.org/help/security-advisories; https://typo3.org/security/advisory/typo3-ext-sa-2022-007; https://typo3.org/help/security-advisories
CVE: CVE-2022-29601
Published: 2022-07-12
Description: The seminars (aka Seminar Manager) extension through 4.1.3 for TYPO3 allows SQL Injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://typo3.org/help/security-advisories; https://typo3.org/security/advisory/typo3-ext-sa-2022-006; https://typo3.org/help/security-advisories
CVE: CVE-2022-31102
Published: 2022-07-12
Description: Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD starting with 2.3.0 and prior to 2.3.6 and 2.4.5 is vulnerable to a cross-site scripting (XSS) bug which could allow an attacker to inject arbitrary JavaScript in the `/auth/callback` page in a victim's browser. This vulnerability only affects Argo CD instances which have single sign on (SSO) enabled. The exploit also assumes the attacker has 1) access to the API server's encryption key, 2) a method to add a cookie to the victim's browser, and 3) the ability to convince the victim to visit a malicious `/auth/callback` link. The vulnerability is classified as low severity because access to the API server's encryption key already grants a high level of access. Exploiting the XSS would allow the attacker to impersonate the victim, but would not grant any privileges which the attacker could not otherwise gain using the encryption key. A patch for this vulnerability has been released in the following Argo CD versions 2.4.5 and 2.3.6. There is currently no known workaround.
CVSS Score: 2.6 (LOW)
CWE: CWE-79
References: https://github.com/argoproj/argo-cd/releases/tag/v2.3.6; https://github.com/argoproj/argo-cd/releases/tag/v2.4.5; https://github.com/argoproj/argo-cd/security/advisories/GHSA-pmjg-52h9-72qv
CVE: CVE-2022-31105
Published: 2022-07-12
Description: Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD starting with version 0.4.0 and prior to 2.2.11, 2.3.6, and 2.4.5 is vulnerable to an improper certificate validation bug which could cause Argo CD to trust a malicious (or otherwise untrustworthy) OpenID Connect (OIDC) provider. A patch for this vulnerability has been released in Argo CD versions 2.4.5, 2.3.6, and 2.2.11. There are no complete workarounds, but a partial workaround is available. Those who use an external OIDC provider (not the bundled Dex instance), can mitigate the issue by setting the `oidc.config.rootCA` field in the `argocd-cm` ConfigMap. This mitigation only forces certificate validation when the API server handles login flows. It does not force certificate verification when verifying tokens on API calls.
CVSS Score: 8.3 (HIGH)
CWE: CWE-295, CWE-599, CWE-295
References: https://github.com/argoproj/argo-cd/releases/tag/v2.3.6; https://github.com/argoproj/argo-cd/releases/tag/v2.4.5; https://github.com/argoproj/argo-cd/security/advisories/GHSA-7943-82jg-wmw5
CVE: CVE-2022-33154
Published: 2022-07-12
Description: The schema (aka Embedding schema.org vocabulary) extension before 1.13.1 and 2.x before 2.5.1 for TYPO3 allows XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://typo3.org/security/advisory/typo3-ext-sa-2022-012; https://typo3.org/security/advisory/typo3-ext-sa-2022-012
CVE: CVE-2022-33155
Published: 2022-07-12
Description: The ameos_tarteaucitron (aka AMEOS - TarteAuCitron GDPR cookie banner and tracking management / French RGPD compatible) extension before 1.2.23 for TYPO3 allows XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://typo3.org/security/advisory/typo3-ext-sa-2022-013; https://typo3.org/security/advisory/typo3-ext-sa-2022-013
CVE: CVE-2022-35403
Published: 2022-07-12
Description: Zoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before 10606, and SupportCenter Plus before 11022 are affected by an unauthenticated local file disclosure vulnerability via ticket-creation email. (This also affects Asset Explorer before 6977 with authentication.)
CVSS Score: 7.5 (HIGH)
References: https://www.manageengine.com/products/service-desk/cve-2022-35403.html; https://www.manageengine.com/products/service-desk/cve-2022-35403.html
CVE: CVE-2022-21845
Published: 2022-07-12
Description: Windows Kernel Information Disclosure Vulnerability
CVSS Score: 4.7 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21845; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21845
CVE: CVE-2022-22022
Published: 2022-07-12
Description: Windows Print Spooler Elevation of Privilege Vulnerability
CVSS Score: 7.1 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22022; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22022
CVE: CVE-2022-22023
Published: 2022-07-12
Description: Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability
CVSS Score: 6.6 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22023; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22023
CVE: CVE-2022-22024
Published: 2022-07-12
Description: Windows Fax Service Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22024; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22024
CVE: CVE-2022-22025
Published: 2022-07-12
Description: Windows Internet Information Services Cachuri Module Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22025; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22025
CVE: CVE-2022-22026
Published: 2022-07-12
Description: Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22026; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22026
CVE: CVE-2022-22027
Published: 2022-07-12
Description: Windows Fax Service Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22027; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22027
CVE: CVE-2022-22028
Published: 2022-07-12
Description: Windows Network File System Information Disclosure Vulnerability
CVSS Score: 5.9 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22028; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22028
CVE: CVE-2022-22029
Published: 2022-07-12
Description: Windows Network File System Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22029; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22029
CVE: CVE-2022-22031
Published: 2022-07-12
Description: Windows Credential Guard Domain-joined Public Key Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-312
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22031; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22031
CVE: CVE-2022-22034
Published: 2022-07-12
Description: Windows Graphics Component Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22034; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22034
CVE: CVE-2022-22036
Published: 2022-07-12
Description: Performance Counters for Windows Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22036; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22036
CVE: CVE-2022-22037
Published: 2022-07-12
Description: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22037; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22037
CVE: CVE-2022-22038
Published: 2022-07-12
Description: Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22038; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22038
CVE: CVE-2022-22039
Published: 2022-07-12
Description: Windows Network File System Remote Code Execution Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22039; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22039
CVE: CVE-2022-22040
Published: 2022-07-12
Description: Internet Information Services Dynamic Compression Module Denial of Service Vulnerability
CVSS Score: 7.3 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22040; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22040
CVE: CVE-2022-22041
Published: 2022-07-12
Description: Windows Print Spooler Elevation of Privilege Vulnerability
CVSS Score: 6.8 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22041; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22041
CVE: CVE-2022-22042
Published: 2022-07-12
Description: Windows Hyper-V Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22042; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22042
CVE: CVE-2022-22043
Published: 2022-07-12
Description: Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22043; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22043
CVE: CVE-2022-22045
Published: 2022-07-12
Description: Windows.Devices.Picker.dll Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22045; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22045
CVE: CVE-2022-22047
Published: 2022-07-12
Description: Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-426, CWE-426
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22047; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22047; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22047
CVE: CVE-2022-22048
Published: 2022-07-12
Description: BitLocker Security Feature Bypass Vulnerability
CVSS Score: 6.1 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22048; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22048
CVE: CVE-2022-22049
Published: 2022-07-12
Description: Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22049; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22049
CVE: CVE-2022-22050
Published: 2022-07-12
Description: Windows Fax Service Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22050; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22050
CVE: CVE-2022-22711
Published: 2022-07-12
Description: Windows BitLocker Information Disclosure Vulnerability
CVSS Score: 5.7 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22711; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22711
CVE: CVE-2022-29602
Published: 2022-07-12
Description: The gridelements (aka Grid Elements) extension through 7.6.1, 8.x through 8.7.0, 9.x through 9.7.0, and 10.x through 10.2.0 extension for TYPO3 allows XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://typo3.org/help/security-advisories; https://typo3.org/security/advisory/typo3-ext-sa-2022-009; https://typo3.org/help/security-advisories
CVE: CVE-2022-30181
Published: 2022-07-12
Description: Azure Site Recovery Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30181; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30181
CVE: CVE-2022-30187
Published: 2022-07-12
Description: Azure Storage Library Information Disclosure Vulnerability
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-327
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30187; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30187
CVE: CVE-2022-30202
Published: 2022-07-12
Description: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30202; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30202
CVE: CVE-2022-30203
Published: 2022-07-12
Description: Windows Boot Manager Security Feature Bypass Vulnerability
CVSS Score: 7.4 (HIGH)
CWE: CWE-863
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30203; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30203
CVE: CVE-2022-30205
Published: 2022-07-12
Description: Windows Group Policy Elevation of Privilege Vulnerability
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30205; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30205
CVE: CVE-2022-30206
Published: 2022-07-12
Description: Windows Print Spooler Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30206; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30206