Lucene search

[email protected]CVE-2022-46905

HistoryDec 12, 2022 - 9:15 p.m.

CVE-2022-46905

2022-12-1221:15:10

CWE-79

[email protected]

web.nvd.nist.gov

cve-2022-46905

insufficient input processing

websoft hcm

reflected xss

nvd

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

33.2%

JSON

Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an unauthenticated attacker to inject arbitrary HTML tags into the page processed by the user’s browser, including scripts in the JavaScript programming language, which leads to Reflected XSS.

Affected configurations

NVD

Node

websoftwebsoft_hcmMatch2021.2.3.327

CPENameOperatorVersion
websoft:websoft_hcmwebsoft websoft hcmeq2021.2.3.327

CPE	Name	Operator	Version
websoft:websoft_hcm	websoft websoft hcm	eq	2021.2.3.327

References

news.websoft.ru/_wt/wiki_base/7175852393019676262

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

33.2%

JSON

Related for CVE-2022-46905

prion1 cvelist1 nvd1