Lucene search

K
nvd[email protected]NVD:CVE-2022-46786
HistoryFeb 23, 2023 - 8:15 p.m.

CVE-2022-46786

2023-02-2320:15:12
CWE-79
web.nvd.nist.gov
2
squaredup dashboard server
scom edition
xss vulnerability

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

23.5%

SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows XSS (issue 2 of 2).

Affected configurations

Nvd
Node
squaredupdashboard_serverRange<5.7.1.9085azure
OR
squaredupdashboard_serverRange<5.7.1.9085community
OR
squaredupdashboard_serverRange<5.7.1.9085system_center_operations_manager
VendorProductVersionCPE
squaredupdashboard_server*cpe:2.3:a:squaredup:dashboard_server:*:*:*:*:azure:*:*:*
squaredupdashboard_server*cpe:2.3:a:squaredup:dashboard_server:*:*:*:*:community:*:*:*
squaredupdashboard_server*cpe:2.3:a:squaredup:dashboard_server:*:*:*:*:system_center_operations_manager:*:*:*

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

23.5%

Related for NVD:CVE-2022-46786