Lucene search

K
cveMitreCVE-2022-23099
HistoryJul 27, 2022 - 2:15 p.m.

CVE-2022-23099

2022-07-2714:15:08
CWE-79
mitre
web.nvd.nist.gov
39
4
cve-2022-23099
ox app suite
xss
security vulnerability
nvd

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

24.8%

OX App Suite through 7.10.6 allows XSS by forcing block-wise read.

Affected configurations

Nvd
Node
open-xchangeapp_suiteRange7.10.6
VendorProductVersionCPE
open-xchangeapp_suite*cpe:2.3:a:open-xchange:app_suite:*:*:*:*:*:*:*:*

Social References

More

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

24.8%

Related for CVE-2022-23099