Lucene search
MitreCVELIST:CVE-2022-38339HistorySep 19, 2022 - 12:00 a.m.
CVE-2022-38339
2022-09-1900:00:00
mitre
www.cve.org
1
safe software fme server
xss
vulnerability
cross-site scripting
arbitrary web scripts
html
login page
CVSS3
9.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
AI Score
8.1
Confidence
High
EPSS
0.001
Percentile
33.5%
Safe Software FME Server v2021.2.5, v2022.0.0.2 and below contains a cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the login page.
Related
nvd
nvd
CVE-2022-38339
2022-09-19 22:15:11
cve
cve
CVE-2022-38339
2022-09-19 22:15:11
prion
prion
Cross site scripting
2022-09-19 22:15:00
CVSS3
9.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
AI Score
8.1
Confidence
High
EPSS
0.001
Percentile
33.5%
Related for CVELIST:CVE-2022-38339