Lucene search

K
cveMitreCVE-2022-34833
HistoryOct 27, 2023 - 9:15 p.m.

CVE-2022-34833

2023-10-2721:15:08
CWE-79
mitre
web.nvd.nist.gov
43
cve-2022-34833
xss
vermeg agilereporter
security
vulnerability

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

20.8%

An issue was discovered in VERMEG AgileReporter 21.3. An admin can enter an XSS payload in the Analysis component.

Affected configurations

Nvd
Node
vermegagile_reporterMatch21.3
VendorProductVersionCPE
vermegagile_reporter21.3cpe:2.3:a:vermeg:agile_reporter:21.3:*:*:*:*:*:*:*

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

20.8%

Related for CVE-2022-34833