Lucene search

K
cvelistMitreCVELIST:CVE-2022-37462
HistoryApr 10, 2023 - 12:00 a.m.

CVE-2022-37462

2023-04-1000:00:00
mitre
www.cve.org
2
cve-2022-37462
cross-site scripting
chat gadget
remote attackers
injection
file-upload

EPSS

0.001

Percentile

41.4%

A stored Cross-Site Scripting (XSS) vulnerability in the Chat gadget in Upstream Works Agent Desktop for Cisco Finesse through 4.2.12 and 5.0 allows remote attackers to inject arbitrary web script or HTML via AttachmentId in the file-upload details.

EPSS

0.001

Percentile

41.4%

Related for CVELIST:CVE-2022-37462