Lucene search
+L

21 matches found

Kitploit
Kitploit
•added 2026/10/18 9:37 a.m.•23 views

CVE-2022-22733

CVE-2022-22733 CVE-2022-22733 is a vulnerabilit that affects Apache ShardingSphere ElasticJob-UI 3.0.0 and below versions, The vulnerability lead to Privilege Escalation. But, with abusing of the escalated privileges a JDBC Attack it can preformed & achieve RCE. You can read the vulnerability...

6.5CVSS7AI score0.37594EPSS
SaveExploits2References2
RedhatCVE
RedhatCVE
•added 2026/01/09 10:48 a.m.•27 views

CVE-2022-31764

The Lite UI of Apache ShardingSphere ElasticJob-UI allows an attacker to perform RCE by constructing a special JDBC URL of H2 database. This issue affects Apache ShardingSphere ElasticJob-UI version 3.0.1 and prior versions. This vulnerability has been fixed in ElasticJob-UI 3.0.2. The premise of...

8.5CVSS7.4AI score0.00683EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•26 views

EUVD-2022-54255

Malicious code in bioql PyPI...

8.5CVSS7.6AI score0.00683EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/03/26 12:00 a.m.•21 views

Lite UI Internal Index Assignment Unauthorized Access

The vulnerability of the Lite UI user interface library used in the Apache ShardingSphere ElasticJob-UI task scheduling software is related to an error in the assignment of the internal interface index. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...

8.5CVSS5.5AI score0.00683EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2025/02/06 2:23 p.m.•58 views

CVE-2022-31764 Apache ShardingSphere ElasticJob-UI allows RCE via event trace data source JDBC

The Lite UI of Apache ShardingSphere ElasticJob-UI allows an attacker to perform RCE by constructing a special JDBC URL of H2 database. This issue affects Apache ShardingSphere ElasticJob-UI version 3.0.1 and prior versions. This vulnerability has been fixed in ElasticJob-UI 3.0.2. The premise of...

0.00683EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/06 2:23 p.m.•10 views

CVE-2022-31764 Apache ShardingSphere ElasticJob-UI allows RCE via event trace data source JDBC

The Lite UI of Apache ShardingSphere ElasticJob-UI allows an attacker to perform RCE by constructing a special JDBC URL of H2 database. This issue affects Apache ShardingSphere ElasticJob-UI version 3.0.1 and prior versions. This vulnerability has been fixed in ElasticJob-UI 3.0.2. The premise of...

6.8AI score0.00683EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/06 2:23 p.m.•93 views

CVE-2022-31764

The Lite UI of Apache ShardingSphere ElasticJob-UI is vulnerable to Remote Code Execution (RCE) in versions 3.0.1 and prior . The root cause is the improper handling of a specially constructed JDBC URL for an H2 database , which allows an attacker to execute arbitrary code. This attack requires t...

8.5CVSS6.5AI score0.00683EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2025/02/06 2:23 p.m.•8 views

CVE-2022-31764

The Lite UI of Apache ShardingSphere ElasticJob-UI allows an attacker to perform RCE by constructing a special JDBC URL of H2 database. This issue affects Apache ShardingSphere ElasticJob-UI version 3.0.1 and prior versions. This vulnerability has been fixed in ElasticJob-UI 3.0.2. The premise of...

9CVSS0.00683EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2025/02/06 2:23 p.m.•18 views

CVE-2022-31764 Apache ShardingSphere ElasticJob-UI allows RCE via event trace data source JDBC

The Lite UI of Apache ShardingSphere ElasticJob-UI allows an attacker to perform RCE by constructing a special JDBC URL of H2 database. This issue affects Apache ShardingSphere ElasticJob-UI version 3.0.1 and prior versions. This vulnerability has been fixed in ElasticJob-UI 3.0.2. The premise of...

8.5CVSS7AI score
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/06 12:00 a.m.•7 views

CVE-2022-31764: Improper Control of Dynamically-Managed Code Resources

The Lite UI of Apache ShardingSphere ElasticJob-UI allows an attacker to perform RCE by constructing a special JDBC URL of H2 database. This issue affects Apache ShardingSphere ElasticJob-UI version 3.0.1 and prior versions. This vulnerability has been fixed in ElasticJob-UI 3.0.2. The premise of...

8.5CVSS5.7AI score0.00683EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2023/04/25 11:39 a.m.•315 views

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Apache Shardingsphere_Elasticjob-Ui

CVE-2022-22733 CVE-2022-22733 is a vulnerabilit that affects...

6.5CVSS6.7AI score0.37594EPSS
SaveExploits2
Positive Technologies
Positive Technologies
•added 2022/11/01 12:00 a.m.•21 views

PT-2025-5826 · Apache · Apache Shardingsphere Elasticjob-Ui

Name of the Vulnerable Software and Affected Versions: Apache ShardingSphere ElasticJob-UI versions prior to 3.0.2 Description: The issue allows an attacker to perform remote code execution RCE by constructing a special JDBC URL of the H2 database. The premise of this attack is that the attacker...

8.5CVSS7.2AI score0.00683EPSS
SaveExploits0References7
CNVD
CNVD
•added 2022/01/23 12:00 a.m.•86 views

Apache ShardingSphere Information Disclosure Vulnerability

Apache ShardingSphere is an open source distributed database middleware solution from the Apache Foundation.Apache ShardingSphere ElasticJob-UI is vulnerable to an information disclosure vulnerability that stems from the exposure of sensitive information to unauthorized participants, which could ...

6.5CVSS2.5AI score0.37594EPSS
SaveExploits2References1
NVD
NVD
•added 2022/01/20 11:15 a.m.•34 views

CVE-2022-22733

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache ShardingSphere ElasticJob-UI allows an attacker who has guest account to do privilege escalation. This issue affects Apache ShardingSphere ElasticJob-UI Apache ShardingSphere ElasticJob-UI 3.x version 3.0.0 and pri...

6.5CVSS0.37594EPSS
SaveExploits2References2
Prion
Prion
•added 2022/01/20 11:15 a.m.•22 views

Privilege escalation

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache ShardingSphere ElasticJob-UI allows an attacker who has guest account to do privilege escalation. This issue affects Apache ShardingSphere ElasticJob-UI Apache ShardingSphere ElasticJob-UI 3.x version 3.0.0 and pri...

4CVSS6.4AI score0.37594EPSS
SaveExploits2References2Affected Software1
Mend
Mend
•added 2022/01/20 10:25 a.m.•4 views

CVE-2022-22733

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache ShardingSphere ElasticJob-UI allows an attacker who has guest account to do privilege escalation. This issue affects Apache ShardingSphere ElasticJob-UI Apache ShardingSphere ElasticJob-UI 3.x version 3.0.0 and pri...

7.1CVSS0.37594EPSS
SaveExploits2References4
osv_cve
osv_cve
•added 2022/01/20 10:25 a.m.•38 views

CVE-2022-22733 Access-Token in ElasticJob UI causes password disclosure

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache ShardingSphere ElasticJob-UI allows an attacker who has guest account to do privilege escalation. This issue affects Apache ShardingSphere ElasticJob-UI Apache ShardingSphere ElasticJob-UI 3.x version 3.0.0 and pri...

6.6AI score0.37594EPSS
SaveExploits2References4
CVE
CVE
•added 2022/01/20 10:25 a.m.•146 views

CVE-2022-22733

Apache ShardingSphere ElasticJob-UI (3.x, v3.0.0 and earlier) is affected by CVE-2022-22733, which allows a guest account to escalate privileges due to exposure of sensitive information to an unauthorized actor. Technical details from connected sources confirm the vulnerable component is ElasticJ...

6.5CVSS6.4AI score0.37594EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
•added 2022/01/20 10:25 a.m.•37 views

CVE-2022-22733 Access-Token in ElasticJob UI causes password disclosure

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache ShardingSphere ElasticJob-UI allows an attacker who has guest account to do privilege escalation. This issue affects Apache ShardingSphere ElasticJob-UI Apache ShardingSphere ElasticJob-UI 3.x version 3.0.0 and pri...

6.6AI score0.37594EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/20 12:00 a.m.•4 views

CVE-2022-22733: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache ShardingSphere ElasticJob-UI allows an attacker who has guest account to do privilege escalation. This issue affects Apache ShardingSphere ElasticJob-UI Apache ShardingSphere ElasticJob-UI 3.x version 3.0.0 and pri...

6.5CVSS5.8AI score0.37594EPSS
SaveExploits2References3
Rows per page
Query Builder