CVE-2022-38357

2022-08-1522:07:49

tenable

www.cve.org

9.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.3%

JSON

Improper neutralization of special elements leaves the Eyes of Network Web application vulnerable to an iFrame injection attack, via the url parameter of /module/module_frame/index.php.

CNA Affected

[
  {
    "product": "Eyes of Network Web",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "5.3"
      }
    ]
  }
]

References

www.tenable.com/security/research/tra-2022-29