Lucene search

K
cveMitreCVE-2022-48192
HistoryNov 06, 2023 - 8:15 p.m.

CVE-2022-48192

2023-11-0620:15:07
CWE-79
mitre
web.nvd.nist.gov
18
cve-2022-48192
cross-site scripting
vulnerability
softing smartlink sw-ht
nvd

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

17.0%

Cross-site Scripting vulnerability in Softing smartLink SW-HT before 1.30, which allows an attacker to execute a dynamic script (JavaScript, VBScript) in the context of the application.

Affected configurations

Nvd
Node
softingsmartlink_sw-htRange<1.30
VendorProductVersionCPE
softingsmartlink_sw-ht*cpe:2.3:a:softing:smartlink_sw-ht:*:*:*:*:*:*:*:*

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

17.0%

Related for CVE-2022-48192