Lucene search

K
nvd[email protected]NVD:CVE-2022-43697
HistoryApr 15, 2023 - 2:15 a.m.

CVE-2022-43697

2023-04-1502:15:07
CWE-79
web.nvd.nist.gov
xss
ox app suite
activity tracking
jslob
cve-2022-43697

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

43.8%

OX App Suite before 7.10.6-rev30 allows XSS via an activity tracking adapter defined by jslob.

Affected configurations

NVD
Node
open-xchangeox_app_suiteRange<7.10.6
OR
open-xchangeox_app_suiteMatch7.10.6-
OR
open-xchangeox_app_suiteMatch7.10.6rev01
OR
open-xchangeox_app_suiteMatch7.10.6rev02
OR
open-xchangeox_app_suiteMatch7.10.6rev03
OR
open-xchangeox_app_suiteMatch7.10.6rev04
OR
open-xchangeox_app_suiteMatch7.10.6rev05
OR
open-xchangeox_app_suiteMatch7.10.6rev06
OR
open-xchangeox_app_suiteMatch7.10.6rev07
OR
open-xchangeox_app_suiteMatch7.10.6rev08
OR
open-xchangeox_app_suiteMatch7.10.6rev09
OR
open-xchangeox_app_suiteMatch7.10.6rev10
OR
open-xchangeox_app_suiteMatch7.10.6rev11
OR
open-xchangeox_app_suiteMatch7.10.6rev12
OR
open-xchangeox_app_suiteMatch7.10.6rev13
OR
open-xchangeox_app_suiteMatch7.10.6rev14
OR
open-xchangeox_app_suiteMatch7.10.6rev15
OR
open-xchangeox_app_suiteMatch7.10.6rev16
OR
open-xchangeox_app_suiteMatch7.10.6rev17
OR
open-xchangeox_app_suiteMatch7.10.6rev18
OR
open-xchangeox_app_suiteMatch7.10.6rev19
OR
open-xchangeox_app_suiteMatch7.10.6rev20
OR
open-xchangeox_app_suiteMatch7.10.6rev21
OR
open-xchangeox_app_suiteMatch7.10.6rev22
OR
open-xchangeox_app_suiteMatch7.10.6rev23
OR
open-xchangeox_app_suiteMatch7.10.6rev24
OR
open-xchangeox_app_suiteMatch7.10.6rev25
OR
open-xchangeox_app_suiteMatch7.10.6rev26
OR
open-xchangeox_app_suiteMatch7.10.6rev27
OR
open-xchangeox_app_suiteMatch7.10.6rev28
OR
open-xchangeox_app_suiteMatch7.10.6rev29

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

43.8%

Related for NVD:CVE-2022-43697