CVE-2022-39988

2022-10-0618:16:19

Google

osv.dev

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

5.7 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.9%

JSON

A cross-site scripting (XSS) vulnerability in Centreon 22.04.0 allows attackers to execute arbitrary web script or HTML via a crafted payload injected into the Service>Templates service_alias parameter.

CPENameOperatorVersion
centreoneqjs-config-22.4.5
centreonequi-context-22.4.1
centreoneqcentreon-web-22.04.7
centreoneqcentreon-widget-host-monitoring-22.04.0
centreoneqcentreon-widget-graph-monitoring-22.04.0
centreoneqcentreon-widget-live-top10-memory-usage-22.04.0
centreoneqcentreon-widget-live-top10-cpu-usage-22.04.0
centreonequi-22.4.4
centreonequi-context-22.4.3
centreonequi-22.4.1

Name	Operator	Version
centreon	eq	js-config-22.4.5
centreon	eq	ui-context-22.4.1
centreon	eq	centreon-web-22.04.7
centreon	eq	centreon-widget-host-monitoring-22.04.0
centreon	eq	centreon-widget-graph-monitoring-22.04.0
centreon	eq	centreon-widget-live-top10-memory-usage-22.04.0
centreon	eq	centreon-widget-live-top10-cpu-usage-22.04.0
centreon	eq	ui-22.4.4
centreon	eq	ui-context-22.4.3
centreon	eq	ui-22.4.1