Lucene search

TR-CERTCVELIST:CVE-2022-45091

HistoryFeb 08, 2023 - 7:27 p.m.

CVE-2022-45091 Cross-site Scripting in Smartpower Web

2023-02-0819:27:17

CWE-79

TR-CERT

www.cve.org

cross-site scripting

smartpower web

group arge energy and control systems

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

23.5%

JSON

Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in Group Arge Energy and Control Systems Smartpower Web allows Cross-Site Scripting (XSS).This issue affects Smartpower Web: before 23.01.01.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Smartpower Web",
    "vendor": "Group Arge Energy and Control Systems",
    "versions": [
      {
        "lessThan": "23.01.01",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.usom.gov.tr/bildirim/tr-23-0066