CVE-2022-38162

CVE-2022-38162 describes a reflected XSS in WithSecure’s F-Secure Policy Manager caused by an unvalidated parameter in a vulnerable endpoint. Affected software is WithSecure/Policy Manager (versions up to 2022-08-10 per sources). The vulnerability enables remote attackers to inject malicious inpu...

CVE-2022-38165

The CVE-2022-38165 entry concerns Arbitrary file write in F-Secure Policy Manager (and WithSecure rebrand) prior to 2022-08-10. An unauthenticated attacker could write arbitrary files to arbitrary locations on the Policy Manager Server. Publicly available connected documents corroborate the flaw’...