Lucene search

K
cveMitreCVE-2022-38489
HistoryJan 10, 2023 - 9:15 p.m.

CVE-2022-38489

2023-01-1021:15:12
CWE-79
mitre
web.nvd.nist.gov
22
easyvista
2020.2.125.3
2022.1.109.0.03
2022.1.110.1.02
xss
vulnerability
cve-2022-38489
nvd

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

22.7%

An issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03 It is prone to stored Cross-site Scripting (XSS). Version 2022.1.110.1.02 fixes the vulnerably.

Affected configurations

Nvd
Node
easyvistaservice_managerMatch2020.2.125.3
OR
easyvistaservice_managerMatch2022.1.109.0.03
VendorProductVersionCPE
easyvistaservice_manager2020.2.125.3cpe:2.3:a:easyvista:service_manager:2020.2.125.3:*:*:*:*:*:*:*
easyvistaservice_manager2022.1.109.0.03cpe:2.3:a:easyvista:service_manager:2022.1.109.0.03:*:*:*:*:*:*:*

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

22.7%

Related for CVE-2022-38489