CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

attackerkb•added 2022/10/10 11:45 p.m.•17 views

CVE-2022-40248

An HTML injection vulnerability exists in CERT/CC VINCE software prior to 1.50.4. An authenticated attacker can inject arbitrary HTML via form using the "Product Affected" field...

5.4CVSS6.2AI score0.00452EPSS

SaveExploits0References2Affected Software1

NVD•added 2022/10/10 8:15 p.m.•62 views

CVE-2022-40248

An HTML injection vulnerability exists in CERT/CC VINCE software prior to 1.50.4. An authenticated attacker can inject arbitrary HTML via form using the "Product Affected" field...

5.4CVSS0.00452EPSS

SaveExploits0References1

Mend•added 2022/10/10 12:00 a.m.•7 views

CVE-2022-40248

An HTML injection vulnerability exists in CERT/CC VINCE software prior to 1.50.4. An authenticated attacker can inject arbitrary HTML via form using the "Product Affected" field...

5.4CVSS0.00452EPSS

SaveExploits0References3

Rapid7 Vulnerability Database (full)•added 2022/10/10 12:00 a.m.•11 views

CVE-2022-40248: Improper Neutralization of Special Elements in Output Used by a Downstream Component

An HTML injection vulnerability exists in CERT/CC VINCE software prior to 1.50.4. An authenticated attacker can inject arbitrary HTML via form using the "Product Affected" field...

5.4CVSS6AI score0.00452EPSS

SaveExploits0References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by