rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-27088 
Ivanti DSM Remote <= 6.3.1.1862 is vulnerable to an unquoted service path allowing local users to launch processes with elevated privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-11T13:59:44.000Z
CVE-2022-27089 
In Fujitsu PlugFree Network <= 7.3.0.3, an Unquoted service path in PFNService.exe software allows a local attacker to potentially escalate privileges to system level.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-11T13:57:41.000Z
CVE-2022-27090 
Cscms Music Portal System v4.2 was discovered to contain a redirection vulnerability via the backurl parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-21T21:05:26.000Z
CVE-2022-27094 
Sony PlayMemories Home v6.0 contains an unquoted service path which allows attackers to escalate privileges to the system level.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-20T12:48:01.000Z
CVE-2022-27095 
BattlEye v0.9 contains an unquoted service path which allows attackers to escalate privileges to the system level.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-20T12:48:13.000Z
CVE-2022-27103 
element-plus 2.0.5 is vulnerable to Cross Site Scripting (XSS) via el-table-column.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-25T12:11:09.000Z
CVE-2022-27104 
An Unauthenticated time-based blind SQL injection vulnerability exists in Forma LMS prior to v.1.4.3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-19T16:59:36.000Z
CVE-2022-27105 
InMailX Outlook Plugin < 3.22.0101 is vulnerable to Cross Site Scripting (XSS). InMailX Connection names are not sanitzed in the Outlook tab, which allows a local user or network administrator to execute HTML / Javascript in the Outlook of users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-26T21:08:13.000Z
CVE-2022-27107 
OrangeHRM 4.10 is vulnerable to Stored XSS in the "Share Video" section under "OrangeBuzz" via the GET/POST "createVideo[linkAddress]" parameter
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-06T14:39:35.000Z
CVE-2022-27108 
OrangeHRM 4.10 is vulnerable to Insecure Direct Object Reference (IDOR) via the end point symfony/web/index.php/time/createTimesheet`. Any user can create a timesheet in another user's account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-06T14:40:43.000Z
CVE-2022-27109 
OrangeHRM 4.10 suffers from a Referer header injection redirect vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-06T14:42:10.000Z
CVE-2022-27110 
OrangeHRM 4.10 is vulnerable to a Host header injection redirect via viewPersonalDetails endpoint.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-06T14:43:52.000Z
CVE-2022-27111 
Jfinal_CMS 5.1.0 allows attackers to use the feedback function to send malicious XSS code to the administrator backend and execute it.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-11T14:43:27.000Z
CVE-2022-27114 
There is a vulnerability in htmldoc 1.9.16. In image_load_jpeg function image.cxx when it calls malloc,'img->width' and 'img->height' they are large enough to cause an integer overflow. So, the malloc function may return a heap blosmaller than the expected size, and it will cause a buffer overflow/Address boundary error in the jpeg_read_scanlines function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-09T16:52:39.000Z
CVE-2022-27115 
In Studio-42 elFinder 2.1.60, there is a vulnerability that causes remote code execution through file name bypass for file upload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-11T14:19:31.000Z
CVE-2022-27123 
Employee Performance Evaluation v1.0 was discovered to contain a SQL injection vulnerability via the email parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-05T19:03:01.000Z
CVE-2022-27124 
Insurance Management System 1.0 was discovered to contain a SQL injection vulnerability via the username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-05T19:03:02.000Z
CVE-2022-27125 
zbzcms v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the neirong parameter at /php/ajax.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-10T20:24:10.000Z
CVE-2022-27126 
zbzcms v1.0 was discovered to contain a SQL injection vulnerability via the art parameter at /include/make.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-10T20:24:09.000Z
CVE-2022-27127 
zbzcms v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php/ajax.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-10T20:24:08.000Z
CVE-2022-27128 
An incorrect access control issue at /admin/run_ajax.php in zbzcms v1.0 allows attackers to arbitrarily add administrator accounts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-10T20:24:08.000Z
CVE-2022-27129 
An arbitrary file upload vulnerability at /admin/ajax.php in zbzcms v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-10T20:24:06.000Z
CVE-2022-27131 
An arbitrary file upload vulnerability at /zbzedit/php/zbz.php in zbzcms v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-10T20:24:03.000Z
CVE-2022-27133 
zbzcms v1.0 was discovered to contain an arbitrary file deletion vulnerability via /include/up.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-10T20:24:01.000Z
CVE-2022-27134 
EOSIO batdappboomx v327c04cf has an Access-control vulnerability in the `transfer` function of the smart contract which allows remote attackers to win the cryptocurrency without paying ticket fee via the `std::string memo` parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-12T22:56:03.000Z
CVE-2022-27135 
xpdf 4.03 has heap buffer overflow in the function readXRefTable located in XRef.cc. An attacker can exploit this bug to cause a Denial of Service (Segmentation fault) or other unspecified effects by sending a crafted PDF file to the pdftoppm binary.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-25T12:48:10.000Z
CVE-2022-27139 
An arbitrary file upload vulnerability in the file upload module of Ghost v4.39.0 allows attackers to execute arbitrary code via a crafted SVG file. NOTE: Vendor states that as outlined in Ghost's security documentation, upload of SVGs is only possible by trusted authenticated users. The uploading of SVG files to Ghost does not represent a remote code execution vulnerability. SVGs are not executable on the server, and may only execute javascript in a client's browser - this is expected and intentional functionality
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-12T16:28:58.000Z
CVE-2022-27140 
An arbitrary file upload vulnerability in the file upload module of express-fileupload 1.3.1 allows attackers to execute arbitrary code via a crafted PHP file. NOTE: the vendor's position is that the observed behavior can only occur with "intentional misusing of the API": the express-fileupload middleware is not responsible for an application's business logic (e.g., determining whether or how a file should be renamed).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-12T00:00:00.000Z
CVE-2022-27145 
GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a stack-overflow vulnerability in function gf_isom_get_sample_for_movie_time of mp4box.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-08T00:00:00.000Z
CVE-2022-27146 
GPAC mp4box 1.1.0-DEV-rev1759-geb2d1e6dd-has a heap-buffer-overflow vulnerability in function gf_isom_apple_enum_tag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-08T15:30:32.000Z
CVE-2022-27147 
GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a use-after-free vulnerability in function gf_node_get_attribute_by_tag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-08T00:00:00.000Z
CVE-2022-27148 
GPAC mp4box 1.1.0-DEV-rev1663-g881c6a94a-master is vulnerable to Integer Overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-08T15:33:10.000Z
CVE-2022-27152 
Roku devices running RokuOS v9.4.0 build 4200 or earlier that uses a Realtek WiFi chip is vulnerable to Arbitrary file modification.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-08T00:00:00.000Z
CVE-2022-27156 
Daylight Studio Fuel CMS 1.5.1 is vulnerable to HTML Injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-11T14:36:10.000Z
CVE-2022-27157 
pearweb < 1.32 is suffers from a Weak Password Recovery Mechanism via include/users/passwordmanage.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-15T18:00:49.000Z
CVE-2022-27158 
pearweb < 1.32 suffers from Deserialization of Untrusted Data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-15T18:03:40.000Z
CVE-2022-27161 
Csz Cms 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Members_viewUsers
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-12T15:05:25.000Z
CVE-2022-27162 
CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Members_editUser
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-12T15:06:52.000Z
CVE-2022-27163 
CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Users_editUser
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-12T15:08:38.000Z
CVE-2022-27164 
CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Users_viewUsers
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-12T15:10:11.000Z
CVE-2022-27165 
CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Plugin_manager_setstatus
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-12T15:11:45.000Z
CVE-2022-27166 XSS vulnerability on XHRHtml2Markup.jsp in JSPWiki 2.11.2
A carefully crafted request on XHRHtml2Markup.jsp could trigger an XSS vulnerability on Apache JSPWiki up to and including 2.11.2, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.
Problem types: description: Cross-site scripting vulnerability on XHRHtml2Markup.jsp
Affected products: vendor: Apache Software Foundation
product: Apache JSPWiki
Credits: lang: en
value: Issue was discovered by Salt, <saltnekoko AT gmail DOT com>
Published: 2022-08-04T06:15:17.000Z
CVE-2022-27167 Arbitrary File Deletion in ESET products for Windows
Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. allows attacker to exploit "Repair" and "Uninstall" features what may lead to arbitrary file deletion. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Internet Security 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Smart Security Premium 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Endpoint Antivirus 6.0 versions prior to 9.0.2046.0. ESET, spol. s r.o. ESET Endpoint Security 6.0 versions prior to 9.0.2046.0. ESET, spol. s r.o. ESET Server Security for Microsoft Windows Server 8.0 versions prior to 9.0.12012.0. ESET, spol. s r.o. ESET File Security for Microsoft Windows Server 8.0.12013.0. ESET, spol. s r.o. ESET Mail Security for Microsoft Exchange Server 6.0 versions prior to 8.0.10020.0. ESET, spol. s r.o. ESET Mail Security for IBM Domino 6.0 versions prior to 8.0.14011.0. ESET, spol. s r.o. ESET Security for Microsoft SharePoint Server 6.0 versions prior to 8.0.15009.0.
Problem types: cwe_id: CWE-280
description: CWE-280 Improper Handling of Insufficient Permissions or Privileges
Affected products: vendor: ESET, spol. s r.o.
product: ESET NOD32 Antivirus
vendor: ESET, spol. s r.o.
product: ESET Internet Security
vendor: ESET, spol. s r.o.
product: ESET Smart Security Premium
vendor: ESET, spol. s r.o.
product: ESET Endpoint Antivirus
vendor: ESET, spol. s r.o.
product: ESET Endpoint Security
vendor: ESET, spol. s r.o.
product: ESET Server Security for Microsoft Windows Server
vendor: ESET, spol. s r.o.
product: ESET File Security for Microsoft Windows Server
vendor: ESET, spol. s r.o.
product: ESET Mail Security for Microsoft Exchange Server
vendor: ESET, spol. s r.o.
product: ESET Mail Security for IBM Domino
vendor: ESET, spol. s r.o.
product: ESET Security for Microsoft SharePoint Server
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.1
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
version: 3.1
Published: 2022-05-10T19:43:59.570Z
CVE-2022-27168 
Cross-site scripting vulnerability in LiteCart versions prior to 2.4.2 allows a remote attacker to inject an arbitrary script via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: LiteCart
product: LiteCart
Published: 2022-07-11T00:40:19.000Z
CVE-2022-27169 
An information disclosure vulnerability exists in the OAS Engine SecureBrowseFile functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted network request can lead to a disclosure of sensitive information. An attacker can send a network request to trigger this vulnerability.
Problem types: cwe_id: CWE-306
description: CWE-306: Missing Authentication for Critical Function
Affected products: vendor: Open Automation Software
product: OAS Platform
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
baseScore: 7.5
baseSeverity: HIGH
Credits: lang: en
value: Discovered by Jared Rittle of Cisco Talos.
Published: 2022-05-25T20:15:29.603Z
CVE-2022-27170 
Protection mechanism failure in the Intel(R) Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
Problem types: description: escalation of privilege
Affected products: vendor: n/a
product: Intel(R) Media SDK software
default_status: unaffected
CVSS v3.1: version: 3.1
baseScore: 5.7
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: REQUIRED
scope: CHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: LOW
Published: 2023-02-16T20:00:16.311Z
CVE-2022-27172 
A hard-coded password vulnerability exists in the console infactory functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted network request can lead to privileged operation execution. An attacker can send a sequence of requests to trigger this vulnerability.
Problem types: cwe_id: CWE-259
description: CWE-259: Use of Hard-coded Password
Affected products: vendor: InHand Networks
product: InRouter302
Published: 2022-05-12T17:01:55.794Z
CVE-2022-27174 
Cross-site request forgery (CSRF) vulnerability in Easy Blog for EC-CUBE4 Ver.1.0.1 and earlier allows a remote unauthenticated attacker to hijack the authentication of the administrator and delete a blog article or a category via a specially crafted page.
Problem types: description: Cross-site request forgery
Affected products: vendor: COREMOBILE Co. Ltd.
product: Easy Blog for EC-CUBE4
Published: 2022-06-13T04:50:28.000Z
CVE-2022-27175 Delta Electronics DIAEnergie SQL Injection in GetCalcTagList
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in GetCalcTagList. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: Delta Electronics
product: DIAEnergie
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Michael Heinzl and Dusan Stevanovic of Trend Micro’s Zero Day Initiative reported these vulnerabilities to CISA.
Published: 2022-03-29T16:37:15.390Z
CVE-2022-27176 
Incomplete filtering of special elements vulnerability exists in RevoWorks SCVX using 'File Sanitization Library' 1.043 and prior versions, RevoWorks Browser 2.2.67 and prior versions (when using 'File Sanitization Option'), and RevoWorks Desktop 2.1.84 and prior versions (when using 'File Sanitization Option'), which may allow an attacker to execute a malicious macro by having a user to download, import, and open a specially crafted file in the local environment.
Problem types: description: Incomplete Filtering of Special Elements
Affected products: vendor: J’s Communication Co., Ltd.
product: RevoWorks SCVX, RevoWorks Browser, and RevoWorks
Published: 2022-06-14T07:05:36.000Z
CVE-2022-27177 
A Python format string issue leading to information disclosure and potentially remote code execution in ConsoleMe for all versions prior to 1.2.2
Problem types: description: Format String Vulnerability in ConsoleMe
Affected products: vendor: n/a
product: ConsoleMe
Published: 2022-04-01T22:17:04.000Z
CVE-2022-27178 
A denial of service vulnerability exists in the confctl_set_wan_cfg functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to denial of service. An attacker can send packets to trigger this vulnerability.
Problem types: cwe_id: CWE-284
description: CWE-284: Improper Access Control
Affected products: vendor: TCL
product: LinkHub Mesh Wifi
Published: 2022-08-05T21:19:00.879Z
CVE-2022-27179 ICSA-22-104-03 Red Lion DA50N
A malicious actor having access to the exported configuration file may obtain the stored credentials and thereby gain access to the protected resource. If the same passwords were used for other resources, further such assets may be compromised.
Problem types: cwe_id: CWE-522
description: CWE-522 Insufficiently Protected Credentials
Affected products: vendor: Red Lion
product: DA50N
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 4.6
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L
version: 3.1
Credits: lang: en
value: Ron Brash of aDolus Technology Inc. reported these vulnerabilities to CISA.
Published: 2022-04-20T15:30:32.718Z
CVE-2022-27180 
Uncontrolled search path in the Intel(R) MacCPUID software before version 3.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
Problem types: description: escalation of privilege
cwe_id: CWE-427
description: Uncontrolled search path
Affected products: vendor: n/a
product: Intel(R) MacCPUID software
default_status: unaffected
CVSS v3.1: version: 3.1
baseScore: 4.2
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L
attackVector: LOCAL
attackComplexity: HIGH
privilegesRequired: LOW
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: LOW
Published: 2023-05-10T13:17:20.857Z
CVE-2022-27181 
On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, when APM is configured on a virtual server and the associated access profile is configured with APM AAA NTLM Auth, undisclosed requests can cause an increase in internal resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Problem types: cwe_id: CWE-400
description: CWE-400 Uncontrolled Resource Consumption
Affected products: vendor: F5
product: BIG-IP APM
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
version: 3.1
Published: 2022-05-05T16:07:20.273Z
CVE-2022-27182 
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, and 14.1.x versions prior to 14.1.4.6, when BIG-IP packet filters are enabled and a virtual server is configured with the type set to Reject, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Problem types: cwe_id: CWE-400
description: CWE-400 Uncontrolled Resource Consumption
Affected products: vendor: F5
product: BIG-IP
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
version: 3.1
Published: 2022-05-05T16:08:18.164Z
CVE-2022-27183 Reflected XSS in a query parameter of the Monitoring Console
The Monitoring Console app configured in Distributed mode allows for a Reflected XSS in a query parameter in Splunk Enterprise versions before 8.1.4. The Monitoring Console app is a bundled app included in Splunk Enterprise, not for download on SplunkBase, and not installed on Splunk Cloud Platform instances. Note that the Cloud Monitoring Console is not impacted.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: Splunk
product: Splunk Enterprise
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Danylo Dmytriiev (DDV_UA)
Published: 2022-05-06T16:38:41.000Z