Lucene search
RedhatCVELIST:CVE-2022-3193HistorySep 28, 2022 - 6:01 p.m.
CVE-2022-3193
2022-09-2818:01:30
CWE-79
redhat
www.cve.org
cve-2022-3193
html injection
cross-site scripting
ovirt-engine
windows service accounts
0.001 Low
EPSS
Percentile
31.5%
An HTML injection/reflected Cross-site scripting (XSS) vulnerability was found in the ovirt-engine. A parameter “error_description” fails to sanitize the entry, allowing the vulnerability to trigger on the Windows Service Accounts home pages.
CNA Affected
[
{
"product": "ovirt-engine",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "ovirt-engine 4.3"
}
]
}
]Related
redhatcve
redhatcve
CVE-2022-3193
2022-09-13 09:43:16
cve
cve
CVE-2022-3193
2022-09-28 19:15:09
osv
osv
CVE-2022-3193
2022-09-28 19:15:09
prion
prion
Cross site scripting
2022-09-28 19:15:00
nvd
nvd
CVE-2022-3193
2022-09-28 19:15:09