Lucene search

K
cvelist@huntrdevCVELIST:CVE-2022-2493
HistoryJul 22, 2022 - 3:47 a.m.

CVE-2022-2493 Data Access from Outside Expected Data Manager Component in openemr/openemr

2022-07-2203:47:17
CWE-1083
@huntrdev
www.cve.org
4
cve-2022-2493
data access
github repository

CVSS3

8.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

EPSS

0.002

Percentile

64.9%

Data Access from Outside Expected Data Manager Component in GitHub repository openemr/openemr prior to 7.0.0.

CNA Affected

[
  {
    "product": "openemr/openemr",
    "vendor": "openemr",
    "versions": [
      {
        "lessThan": "7.0.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

8.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

EPSS

0.002

Percentile

64.9%

Related for CVELIST:CVE-2022-2493