Lucene search
HistorySep 19, 2022 - 10:15 p.m.
CVE-2022-38339
safe software
fme server
v2021.2.5
v2022.0.0.2
xss
vulnerability
9.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
33.5%
Safe Software FME Server v2021.2.5, v2022.0.0.2 and below contains a cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the login page.
Affected configurations
Node
safefme_serverRange<2021.2.6
ORsafefme_serverRange2022.0.0.0–2022.0.1.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| safe:fme_server | safe fme server | lt | 2021.2.6 |
| safe:fme_server | safe fme server | lt | 2022.0.1.1 |
References
Social References
More
Related
nvd
nvd
CVE-2022-38339
2022-09-19 22:15:11
cvelist
cvelist
CVE-2022-38339
2022-09-19 00:00:00
prion
prion
Cross site scripting
2022-09-19 22:15:00
9.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
33.5%
Related for CVE-2022-38339