Lucene search
HistoryMay 29, 2023 - 9:15 p.m.
CVE-2022-24631
audiocodes
device manager express
xss
vulnerability
ajaxtenants.php
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
23.7%
An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is stored XSS via the ajaxTenants.php desc parameter.
Affected configurations
Node
audiocodesdevice_manager_expressRange≤7.8.20002.47752
References
Related
cvelist
cvelist
CVE-2022-24631
2023-05-29 00:00:00
cve
cve
CVE-2022-24631
2023-05-29 21:15:09
prion
prion
Cross site scripting
2023-05-29 21:15:00
zdt
zdt
packetstorm
packetstorm
exploitdb
exploitdb
Device Manager Express 7.8.20002.47752 - Remote Code Execution (RCE)
2023-03-30 00:00:00
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
23.7%
Related for NVD:CVE-2022-24631