CVE-2022-46288

2022-12-1900:00:00

jpcert

www.cve.org

open redirect

denshi nyusatsu core system

remote unauthenticated attacker

phishing attack

specially crafted url

EPSS

0.001

Percentile

45.6%

JSON

Open redirect vulnerability in DENSHI NYUSATSU CORE SYSTEM v6 R4 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially crafted URL.

CNA Affected

[
  {
    "vendor": "Japan Construction Information Center",
    "product": "DENSHI NYUSATSU CORE SYSTEM",
    "versions": [
      {
        "version": "v6 R4 and earlier",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN96321933/index.html

www.cals.jacic.or.jp/coreconso/pdf/coreconsoinfo20221215.pdf

EPSS

0.001

Percentile

45.6%

JSON

Related for CVELIST:CVE-2022-46288