Vulners
Lucene search
CVE-2022-31470
šļøĀ 07 Jun 2022Ā 00:00:00Reported byĀ mitreTypeĀ 
Ā cvešĀ web.nvd.nist.govš°ļøĀ 3Ā Media mentionsšĀ 102Ā Viewsš WEB
| Reporter | Title | Published | Views | Family All 14 |
|---|---|---|---|---|
 | Axigen < 10.3.3.47, 10.2.3.12 - Reflected XSS Vulnerability | 11 Sep 202300:00 | ā | zdt |
 | Exploit for Cross-site Scripting in Axigen Axigen_Mobile_Webmail | 13 Sep 202305:59 | ā | githubexploit |
 | CVE-2022-31470 | 7 Jun 202221:15 | ā | attackerkb |
 | CVE-2022-31470 | 8 Jun 202200:31 | ā | circl |
 | Axigen Mobile WebMail č·Øē«čę¬ę¼ę“ | 7 Jun 202200:00 | ā | cnnvd |
 | CVE-2022-31470 | 7 Jun 202200:00 | ā | cvelist |
 | Axigen < 10.3.3.47, 10.2.3.12 - Reflected XSS | 8 Sep 202300:00 | ā | exploitdb |
 | Axigen WebMail - Cross-Site Scripting | 6 Jun 202603:01 | ā | nuclei |
 | CVE-2022-31470 | 7 Jun 202221:15 | ā | nvd |
 | CVE-2022-31470 | 7 Jun 202221:15 | ā | osv |
10
Node
OR
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| m | query param | /index.hsp | Reflected XSS in index_mobile_changepass.hsp reset-password flow via parameter m | CWE-79 |
| _h | query param | /api/v1/conversations/MQ/ | Exploitation path using _h cookie to access mailbox via PATCH to /api/v1/conversations/MQ/?_h=... | CWE-79 |
| folderId | query param | /api/v1/conversations | Access mailbox contents via conversations API with folderId and _h parameters | CWE-79 |
| _h | query param | /api/v1/conversations | Access mailbox contents via conversations API with folderId and _h parameters | CWE-79 |
Data
Build on a solid foundation withĀ Vulners data
WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data
Api
Power your application withĀ Vulners API
The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access
App
Assess and manage vulnerabilities withĀ VulnersĀ tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
21 Nov 2024 07:04Current
6.1Medium risk
Vulners AI Score6.1
CVSS 24.3
CVSS 3.16.1
EPSS0.26012