deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-35857
Published: 2022-07-13
Description: kvf-admin through 2022-02-12 allows remote attackers to execute arbitrary code because deserialization is mishandled. The rememberMe parameter is encrypted with a hardcoded key from the com.kalvin.kvf.common.shiro.ShiroConfig file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://github.com/kalvinGit/kvf-admin/issues/16; https://github.com/kalvinGit/kvf-admin/issues/16
CVE: CVE-2017-20129
Published: 2022-07-14
Description: A vulnerability was found in LogoStore. It has been classified as critical. Affected is an unknown function of the file /LogoStore/search.php. The manipulation of the argument query with the input test' UNION ALL SELECT CONCAT(CONCAT('qqkkq','VnPVWVaYxljWqGpLLbEIyPIHBjjjjASQTnaqfKaV'),'qvvpq'),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- oCrh&search= leads to sql injection. It is possible to launch the attack remotely.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://vuldb.com/?id.96540; https://vuldb.com/?id.96540
CVE: CVE-2022-25800
Published: 2022-07-14
Description: Best Practical RT for Incident Response (RTIR) before 4.0.3 and 5.x before 5.0.3 allows SSRF via the whois lookup tool.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-918
References: https://docs.bestpractical.com/release-notes/rtir/4.0.3; https://docs.bestpractical.com/release-notes/rtir/5.0.3; https://docs.bestpractical.com/release-notes/rtir/index.html
CVE: CVE-2022-25801
Published: 2022-07-14
Description: Best Practical RT for Incident Response (RTIR) before 4.0.3 and 5.x before 5.0.3 allows SSRF via Scripted Action tools.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-918
References: https://docs.bestpractical.com/release-notes/rtir/4.0.3; https://docs.bestpractical.com/release-notes/rtir/5.0.3; https://docs.bestpractical.com/release-notes/rtir/index.html
CVE: CVE-2022-25802
Published: 2022-07-14
Description: Best Practical Request Tracker (RT) before 4.4.6 and 5.x before 5.0.3 allows XSS via a crafted content type for an attachment.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://docs.bestpractical.com/release-notes/rt/4.4.6; https://docs.bestpractical.com/release-notes/rt/5.0.3; https://docs.bestpractical.com/release-notes/rt/index.html
CVE: CVE-2022-25803
Published: 2022-07-14
Description: Best Practical Request Tracker (RT) before 5.0.3 has an Open Redirect via a ticket search.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://docs.bestpractical.com/release-notes/rt/5.0.3; https://docs.bestpractical.com/release-notes/rt/index.html; https://docs.bestpractical.com/release-notes/rt/5.0.3
CVE: CVE-2022-2396
Published: 2022-07-14
Description: A vulnerability classified as problematic was found in SourceCodester Simple e-Learning System 1.0. Affected by this vulnerability is an unknown functionality of the file /vcs/claire_blake. The manipulation of the argument Bio with the input "><script>alert(document.cookie)</script> leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://github.com/CyberThoth/CVE/blob/83c243538386cd0761025f85eb747eab7cae5c21/CVE/Simple%20e-Learning%20System/Cross%20Site%20Scripting%28Stored%29/POC.md; https://vuldb.com/?id.203779; https://github.com/CyberThoth/CVE/blob/83c243538386cd0761025f85eb747eab7cae5c21/CVE/Simple%20e-Learning%20System/Cross%20Site%20Scripting%28Stored%29/POC.md
CVE: CVE-2022-28369
Published: 2022-07-14
Description: Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 does not validate the user-provided URL within the crtcmode function's enable_ssh sub-operation of the crtcrpc JSON listener (found at /lib/functions/wnc_jsonsh/crtcmode.sh) A remote attacker on the local network can provide a malicious URL. The data (found at that URL) is written to /usr/sbin/dropbear and then executed as root.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/JousterL/SecWriteups/blob/main/Verizon%20LVSKIHP%205G%20Modem/readme.md; https://www.verizon.com/info/reportsecurityvulnerability/; https://github.com/JousterL/SecWriteups/blob/main/Verizon%20LVSKIHP%205G%20Modem/readme.md
CVE: CVE-2022-28370
Published: 2022-07-14
Description: On Verizon 5G Home LVSKIHP OutDoorUnit (ODU) 3.33.101.0 devices, the RPC endpoint crtc_fw_upgrade provides a means of provisioning a firmware update for the device. /lib/functions/wnc_jsonsh/wnc_crtc_fw.sh has no cryptographic validation of the image, thus allowing an attacker to modify the installed firmware.
CVSS Score: 7.5 (HIGH)
CWE: CWE-345
References: https://github.com/JousterL/SecWriteups/blob/main/Verizon%20LVSKIHP%205G%20Modem/readme.md; https://www.verizon.com/info/reportsecurityvulnerability/; https://github.com/JousterL/SecWriteups/blob/main/Verizon%20LVSKIHP%205G%20Modem/readme.md
CVE: CVE-2022-28371
Published: 2022-07-14
Description: On Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 and OutDoorUnit (ODU) 3.33.101.0 devices, the CRTC and ODU RPC endpoints rely on a static certificate for access control. This certificate is embedded in the firmware, and is identical across the fleet of devices. An attacker need only download this firmware and extract the private components of these certificates (from /etc/lighttpd.d/ca.pem and /etc/lighttpd.d/server.pem) to gain access. (The firmware download location is shown in a device's upgrade logs.)
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: https://github.com/JousterL/SecWriteups/blob/main/Verizon%20LVSKIHP%205G%20Modem/readme.md; https://www.verizon.com/info/reportsecurityvulnerability/; https://github.com/JousterL/SecWriteups/blob/main/Verizon%20LVSKIHP%205G%20Modem/readme.md
CVE: CVE-2022-28372
Published: 2022-07-14
Description: On Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 and OutDoorUnit (ODU) 3.33.101.0 devices, the CRTC and ODU RPC endpoints provide a means of provisioning a firmware update for the device via crtc_fw_upgrade or crtcfwimage. The URL provided is not validated, and thus allows for arbitrary file upload to the device. This occurs in /lib/lua/luci/crtc.lua (IDU) and /lib/functions/wnc_jsonsh/wnc_crtc_fw.sh (ODU).
CVSS Score: 7.5 (HIGH)
CWE: CWE-434
References: https://github.com/JousterL/SecWriteups/blob/main/Verizon%20LVSKIHP%205G%20Modem/readme.md; https://www.verizon.com/info/reportsecurityvulnerability/; https://github.com/JousterL/SecWriteups/blob/main/Verizon%20LVSKIHP%205G%20Modem/readme.md
CVE: CVE-2022-28373
Published: 2022-07-14
Description: Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 does not properly sanitize user-controlled parameters within the crtcreadpartition function of the crtcrpc JSON listener in /usr/lib/lua/luci/crtc.lua. A remote attacker on the local network can inject shell metacharacters to achieve remote code execution as root.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/JousterL/SecWriteups/blob/main/Verizon%20LVSKIHP%205G%20Modem/readme.md; https://www.verizon.com/info/reportsecurityvulnerability/; https://github.com/JousterL/SecWriteups/blob/main/Verizon%20LVSKIHP%205G%20Modem/readme.md
CVE: CVE-2022-28374
Published: 2022-07-14
Description: Verizon 5G Home LVSKIHP OutDoorUnit (ODU) 3.33.101.0 does not property sanitize user-controlled parameters within the DMACC URLs on the Settings page of the Engineering portal. An authenticated remote attacker on the local network can inject shell metacharacters into /usr/lib/lua/5.1/luci/controller/admin/settings.lua to achieve remote code execution as root.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://github.com/JousterL/SecWriteups/blob/main/Verizon%20LVSKIHP%205G%20Modem/readme.md; https://www.verizon.com/info/reportsecurityvulnerability/; https://github.com/JousterL/SecWriteups/blob/main/Verizon%20LVSKIHP%205G%20Modem/readme.md
CVE: CVE-2022-28375
Published: 2022-07-14
Description: Verizon 5G Home LVSKIHP OutDoorUnit (ODU) 3.33.101.0 does not property sanitize user-controlled parameters within the crtcswitchsimprofile function of the crtcrpc JSON listener. A remote attacker on the local network can inject shell metacharacters into /usr/lib/lua/5.1/luci/controller/rpc.lua to achieve remote code execution as root,
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/JousterL/SecWriteups/blob/main/Verizon%20LVSKIHP%205G%20Modem/readme.md; https://www.verizon.com/info/reportsecurityvulnerability/; https://github.com/JousterL/SecWriteups/blob/main/Verizon%20LVSKIHP%205G%20Modem/readme.md
CVE: CVE-2022-28377
Published: 2022-07-14
Description: On Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 and OutDoorUnit (ODU) 3.33.101.0 devices, the CRTC and ODU RPC endpoints rely on a static account username/password for access control. This password can be generated via a binary included in the firmware, after ascertaining the MAC address of the IDU's base Ethernet interface, and adding the string DEVICE_MANUFACTURER='Wistron_NeWeb_Corp.' to /etc/device_info to replicate the host environment. This occurs in /etc/init.d/wnc_factoryssidkeypwd (IDU).
CVSS Score: 7.5 (HIGH)
CWE: CWE-521
References: https://github.com/JousterL/SecWriteups/blob/main/Verizon%20LVSKIHP%205G%20Modem/readme.md; https://www.verizon.com/info/reportsecurityvulnerability/; https://github.com/JousterL/SecWriteups/blob/main/Verizon%20LVSKIHP%205G%20Modem/readme.md
CVE: CVE-2022-30113
Published: 2022-07-14
Description: Electronic mall system 1.0_build20200203 is affected vulnerable to SQL Injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.fahuo100.cn; https://www.yuque.com/docs/share/7a99158f-9077-4b37-939d-8ffecff27357; https://www.fahuo100.cn
CVE: CVE-2022-30024
Published: 2022-07-14
Description: A buffer overflow in the httpd daemon on TP-Link TL-WR841N V12 (firmware version 3.16.9) devices allows an authenticated remote attacker to execute arbitrary code via a GET request to the page for the System Tools of the Wi-Fi network. This affects TL-WR841 V12 TL-WR841N(EU)_V12_160624 and TL-WR841 V11 TL-WR841N(EU)_V11_160325 , TL-WR841N_V11_150616 and TL-WR841 V10 TL-WR841N_V10_150310 are also affected.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: http://tl-wr841.com; http://tp-link.com; https://pastebin.com/0XRFr3zE
CVE: CVE-2020-14127
Published: 2022-07-14
Description: A denial of service vulnerability exists in some Xiaomi models of phones. The vulnerability is caused by heap overflow and can be exploited by attackers to make remote denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=169; https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=169
CVE: CVE-2022-1662
Published: 2022-07-14
Description: In convert2rhel, there's an ansible playbook named ansible/run-convert2rhel.yml which passes the Red Hat Subscription Manager user password via the CLI to convert2rhel. This could allow unauthorized local users to view the password via the process list while convert2rhel is running. However, this ansible playbook is only an example in the upstream repository and it is not shipped in officially supported versions of convert2rhel.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://bugzilla.redhat.com/show_bug.cgi?id=2083851; https://bugzilla.redhat.com/show_bug.cgi?id=2083851
CVE: CVE-2022-28876
Published: 2022-07-14
Description: A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aeheur.dll component can crash the scanning engine. The exploit can be triggered remotely by an attacker.
CVSS Score: 4.3 (MEDIUM)
References: https://www.f-secure.com/en/business/support-and-downloads/security-advisories; https://www.withsecure.com/en/support/security-advisories; https://www.f-secure.com/en/business/support-and-downloads/security-advisories
CVE: CVE-2022-29593
Published: 2022-07-14
Description: relay_cgi.cgi on Dingtian DT-R002 2CH relay devices with firmware 3.1.276A allows an attacker to replay HTTP post requests without the need for authentication or a valid signed/authorized request.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-294, CWE-294
References: http://packetstormsecurity.com/files/167868/Dingtian-DT-R002-3.1.276A-Authentication-Bypass.html; https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/cve-2022-29593-authentication-bypass-by-capture-replay-dingtian-dt-r002/; https://www.trustwave.com/en-us/resources/security-resources/security-advisories/
CVE: CVE-2022-2393
Published: 2022-07-14
Description: A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not be able to decrypt message content.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-285
References: https://bugzilla.redhat.com/show_bug.cgi?id=2101046; https://bugzilla.redhat.com/show_bug.cgi?id=2101046
CVE: CVE-2022-32210
Published: 2022-07-14
Description: `Undici.ProxyAgent` never verifies the remote server's certificate, and always exposes all request & response data to the proxy. This unexpectedly means that proxies can MitM all HTTPS traffic, and if the proxy's URL is HTTP then it also means that nominally HTTPS requests are actually sent via plain-text HTTP between Undici and the proxy server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-295, CWE-295
References: https://github.com/nodejs/undici/security/advisories/GHSA-pgw7-wx7w-2w33; https://hackerone.com/reports/1583680; https://github.com/nodejs/undici/security/advisories/GHSA-pgw7-wx7w-2w33
CVE: CVE-2022-32212
Published: 2022-07-14
Description: A OS Command Injection vulnerability exists in Node.js versions <14.20.0, <16.20.0, <18.5.0 due to an insufficient IsAllowedHost check that can easily be bypassed because IsIPAddress does not properly check if an IP address is invalid before making DBS requests allowing rebinding attacks.
CVSS Score: 8.1 (HIGH)
CWE: CWE-284, CWE-78
References: https://hackerone.com/reports/1632921; https://hackerone.com/reports/1632921
CVE: CVE-2022-32213
Published: 2022-07-14
Description: The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly parse and validate Transfer-Encoding headers and can lead to HTTP Request Smuggling (HRS).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-444, CWE-444
References: https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf; https://hackerone.com/reports/1524555; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ICG6CSIB3GUWH5DUSQEVX53MOJW7LYK/
CVE: CVE-2022-32214
Published: 2022-07-14
Description: The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling (HRS).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-444, CWE-444
References: https://hackerone.com/reports/1524692; https://nodejs.org/en/blog/vulnerability/july-2022-security-releases/; https://www.debian.org/security/2023/dsa-5326
CVE: CVE-2022-32215
Published: 2022-07-14
Description: The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly handle multi-line Transfer-Encoding headers. This can lead to HTTP Request Smuggling (HRS).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-444, CWE-444
References: https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf; https://hackerone.com/reports/1501679; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ICG6CSIB3GUWH5DUSQEVX53MOJW7LYK/
CVE: CVE-2022-32222
Published: 2022-07-14
Description: A cryptographic vulnerability exists on Node.js on linux in versions of 18.x prior to 18.40.0 which allowed a default path for openssl.cnf that might be accessible under some circumstances to a non-admin user instead of /etc/ssl as was the case in versions prior to the upgrade to OpenSSL 3.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-310, CWE-427
References: https://hackerone.com/reports/1695596; https://hackerone.com/reports/1695596
CVE: CVE-2022-32223
Published: 2022-07-14
Description: Node.js is vulnerable to Hijack Execution Flow: DLL Hijacking under certain conditions on Windows platforms.This vulnerability can be exploited if the victim has the following dependencies on a Windows machine:* OpenSSL has been installed and “C:\Program Files\Common Files\SSL\openssl.cnf” exists.Whenever the above conditions are present, `node.exe` will search for `providers.dll` in the current user directory.After that, `node.exe` will try to search for `providers.dll` by the DLL Search Order in Windows.It is possible for an attacker to place the malicious file `providers.dll` under a variety of paths and exploit this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-427, CWE-427
References: https://hackerone.com/reports/1447455; https://nodejs.org/en/blog/vulnerability/july-2022-security-releases/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-32225
Published: 2022-07-14
Description: A reflected DOM-Based XSS vulnerability has been discovered in the Help directory of Veeam Management Pack for Microsoft System Center 8.0. This vulnerability could be exploited by an attacker by convincing a legitimate user to visit a crafted URL on a Veeam Management Pack for Microsoft System Center server, allowing for the execution of arbitrary scripts.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.veeam.com/kb4338; https://www.veeam.com/kb4338
CVE: CVE-2021-45492
Published: 2022-07-14
Description: In Sage 300 ERP (formerly accpac) through 6.8.x, the installer configures the C:\Sage\Sage300\Runtime directory to be the first entry in the system-wide PATH environment variable. However, this directory is writable by unprivileged users because the Sage installer fails to set explicit permissions and therefore inherits weak permissions from the C:\ folder. Because entries in the system-wide PATH variable are included in the search order for DLLs, an attacker could perform DLL search-order hijacking to escalate their privileges to SYSTEM. Furthermore, if the Global Search or Web Screens functionality is enabled, then privilege escalation is possible via the GlobalSearchService and Sage.CNA.WindowsService services, again via DLL search-order hijacking because unprivileged users would have modify permissions on the application directory. Note that while older versions of the software default to installing in %PROGRAMFILES(X86)% (which would allow the Sage folder to inherit strong permissions, making the installation not vulnerable), the official Sage 300 installation guides for those versions recommend installing in C:\Sage, which would make the installation vulnerable.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://controlgap.com/blog?tag=insecurity; https://www.controlgap.com/blog/sage-300-case-study; https://controlgap.com/blog?tag=insecurity
CVE: CVE-2021-39015
Published: 2022-07-14
Description: IBM Engineering Lifecycle Optimization - Publishing 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 213655.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/213655; https://www.ibm.com/support/pages/node/6603333; https://exchange.xforce.ibmcloud.com/vulnerabilities/213655
CVE: CVE-2021-39016
Published: 2022-07-14
Description: IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 does not sufficiently monitor or control transmitted network traffic volume, so that an actor can cause the software to transmit more traffic than should be allowed for that actor. IBM X-Force ID: 213722.
CVSS Score: 4.3 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/213722; https://www.ibm.com/support/pages/node/6603335; https://exchange.xforce.ibmcloud.com/vulnerabilities/213722
CVE: CVE-2021-39017
Published: 2022-07-14
Description: IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to upload arbitrary files, caused by improper access controls. IBM X-Force ID: 213725.
CVSS Score: 6.5 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/213725; https://www.ibm.com/support/pages/node/6603341; https://exchange.xforce.ibmcloud.com/vulnerabilities/213725
CVE: CVE-2021-39018
Published: 2022-07-14
Description: IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could disclose sensitive information in a SQL error message that could aid in further attacks against the system. IBM X-Force ID: 213726.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-209
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/213726; https://www.ibm.com/support/pages/node/6603345; https://exchange.xforce.ibmcloud.com/vulnerabilities/213726
CVE: CVE-2021-39019
Published: 2022-07-14
Description: IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could disclose highly sensitive information through an HTTP GET request to an authenticated user. IBM X-Force ID: 213728.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/213728; https://www.ibm.com/support/pages/node/6603355; https://exchange.xforce.ibmcloud.com/vulnerabilities/213728
CVE: CVE-2021-39028
Published: 2022-07-14
Description: IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 213866.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-74
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/213866; https://www.ibm.com/support/pages/node/6603347; https://exchange.xforce.ibmcloud.com/vulnerabilities/213866
CVE: CVE-2022-22473
Published: 2022-07-14
Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information caused by improper handling of Administrative Console data. This information could be used in further attacks against the system. IBM X-Force ID: 225347.
CVSS Score: 5.3 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/225347; https://www.ibm.com/support/pages/node/6603421; https://exchange.xforce.ibmcloud.com/vulnerabilities/225347
CVE: CVE-2022-22477
Published: 2022-07-14
Description: IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 225605.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/225605; https://www.ibm.com/support/pages/node/6603417; https://exchange.xforce.ibmcloud.com/vulnerabilities/225605
CVE: CVE-2022-35283
Published: 2022-07-14
Description: IBM Security Verify Information Queue 10.0.2 could allow an authenticated user to cause a denial of service with a specially crafted HTTP request.
CVSS Score: 6.5 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/230810; https://www.ibm.com/support/pages/node/6603445; https://exchange.xforce.ibmcloud.com/vulnerabilities/230810
CVE: CVE-2022-22450
Published: 2022-07-14
Description: IBM Security Verify Identity Manager 10.0 could allow a privileged user to upload a malicious file by bypassing extension security in an HTTP request. IBM X-Force ID: 224916.
CVSS Score: 3.8 (LOW)
CWE: CWE-434
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/224916; https://www.ibm.com/support/pages/node/6603405; https://exchange.xforce.ibmcloud.com/vulnerabilities/224916