Lucene search

MitreCVE-2022-39809

HistorySep 09, 2022 - 5:15 p.m.

CVE-2022-39809

2022-09-0917:15:08

CWE-79

mitre

web.nvd.nist.gov

208

cve-2022-39809

wso2

enterprise integrator

xss

reflected xss

security vulnerability

nvd

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

31.3%

JSON

An issue was discovered in WSO2 Enterprise Integrator 6.4.0. A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in the Management Console under /carbon/mediation_secure_vault/properties/ajaxprocessor.jsp via the name parameter. Session hijacking or similar attacks would not be possible.

Affected configurations

Nvd

Node

wso2enterprise_integratorMatch6.4.0

VendorProductVersionCPE
wso2enterprise_integrator6.4.0cpe:2.3:a:wso2:enterprise_integrator:6.4.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
wso2	enterprise_integrator	6.4.0	cpe:2.3:a:wso2:enterprise_integrator:6.4.0:::::::*

References

www.gruppotim.it/it/footer/red-team.html

Social References

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

31.3%

JSON

Related for CVE-2022-39809