08cms (1.0.0), 0uth (>=1.0.5, <=1.2.1) +12683 more potentially affected by CVE-2022-39353 via xmldom (>=0.1.2, <=0.6.0)

🗓️ 01 Nov 2022 17:29:11Reported by Vulners OSVType

vulnersosv🔗 github.com👁 1 Views

Transitive dependency in xmldom (NPM) may be impacted by a known vulnerability.

Reporter	Title	Published	Views	Family All 54
IBM Security Bulletins	Security Bulletin: Security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for March 2023	1 Apr 202314:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Control is vulnerable to multiple weaknesses related to Node [CVE-2022-39353]	15 Dec 202210:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operands may be vulnerable to privilege escalation due to CVE-2022-39353	1 Dec 202216:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to a remote attacker due to the module xmldom [CVE-2022-39353]	12 Dec 202216:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	15 Dec 202203:09	–	ibm
BDU FSTEC	XML DOM XML Method Access Unauthenticated Access	5 Dec 202200:00	–	bdu_fstec
CBLMariner	CVE-2022-39353 affecting package python-tensorboard for versions less than 2.16.2-1	17 May 202421:38	–	cbl_mariner
Chainguard	CVE-2022-39353 vulnerabilities	6 Jul 202620:24	–	cgr
Circl	CVE-2022-39353	2 Nov 202219:19	–	circl
CNNVD	XMLDOM 输入验证错误漏洞	2 Nov 202200:00	–	cnnvd

31 Mar 2023 16:06Current

CVSS 3.19.4 - 9.8

EPSS0.01279

SSVC

xmldom NPM vulnerability