Lucene search
HistoryJan 23, 2023 - 5:15 p.m.
CVE-2022-37719
cve-2022-37719
cross-site request forgery
csrf
jetnexus
edgenexus
adc
privilege escalation
arbitrary code execution
security vulnerability
nvd
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
42.1%
A Cross-Site Request Forgery (CSRF) in the management portal of JetNexus/EdgeNexus ADC 4.2.8 allows attackers to escalate privileges and execute arbitrary code via unspecified vectors.
Affected configurations
Node
edgenexusapplication_delivery_controllerMatch4.2.8
| CPE | Name | Operator | Version |
|---|---|---|---|
| edgenexus:application_delivery_controller | edgenexus application delivery controller | eq | 4.2.8 |
Related
prion
prion
Cross site request forgery (csrf)
2023-01-23 17:15:00
cvelist
cvelist
CVE-2022-37719
2023-01-23 00:00:00
nvd
nvd
CVE-2022-37719
2023-01-23 17:15:10
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
42.1%
Related for CVE-2022-37719