Lucene search
HistoryJan 12, 2023 - 4:15 p.m.
CVE-2022-39187
cve-2022-39187
rumpus
ftp server
version 9.0.7.1
reflected cross-site scripting
rxss
vulnerability
nvd
6.8 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
30.7%
Rumpus - FTP server version 9.0.7.1 has a Reflected cross-site scripting (RXSS) vulnerability through unspecified vectors.
Affected configurations
Node
maxumrumpusRange≤9.0.7.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| maxum:rumpus | maxum rumpus | le | 9.0.7.1 |
CNA Affected
[
{
"vendor": "Rumpus",
"product": "FTP server",
"versions": [
{
"version": "latest",
"status": "affected",
"lessThan": "9.0.7.1*",
"versionType": "custom"
}
]
}
]Related
cvelist
cvelist
CVE-2022-39187 Rumpus - FTP server Reflected cross-site scripting (RXSS)
2023-01-12 00:00:00
nvd
nvd
CVE-2022-39187
2023-01-12 16:15:09
prion
prion
Cross site scripting
2023-01-12 16:15:00
6.8 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
30.7%
Related for CVE-2022-39187