Lucene search
HistoryOct 04, 2023 - 4:15 p.m.
CVE-2022-36277
tcman gim
v8.0.1
persistent xss
vulnerability
frmgestionstock.aspx
frmeditservicio.aspx
sreferencia
sdescripcion
txtcodigo
txtdescripcion
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
20.2%
The ‘sReferencia’, ‘sDescripcion’, ‘txtCodigo’ and ‘txtDescripcion’ parameters, in the frmGestionStock.aspx and frmEditServicio.aspx files in TCMAN GIM v8.0.1, could allow an attacker to perform persistent XSS attacks.
Affected configurations
Node
tcmangimMatch8.0.1
Related
vulnrichment
vulnrichment
CVE-2022-36277 SQL injection vulnerability in TCMAN GIM
2023-10-04 15:05:35
cvelist
cvelist
CVE-2022-36277 SQL injection vulnerability in TCMAN GIM
2023-10-04 15:05:35
cve
cve
CVE-2022-36277
2023-10-04 16:15:10
prion
prion
Design/Logic Flaw
2023-10-04 16:15:00
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
20.2%
Related for NVD:CVE-2022-36277