Lucene search

TR-CERTCVELIST:CVE-2022-4554

HistoryJan 24, 2023 - 12:00 a.m.

CVE-2022-4554 Reflected XSS B2B Dealer Ordering System

2023-01-2400:00:00

CWE-79

TR-CERT

www.cve.org

b2b customer

ordering system

reflected xss

vulnerability

fixed

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

0.0005 Low

EPSS

Percentile

17.7%

JSON

B2B Customer Ordering System developed by ID Software Project and Consultancy Services before version 1.0.0.347 has an authenticated Reflected XSS vulnerability. This has been fixed in the version 1.0.0.347.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "B2B Customer Ordering System",
    "vendor": "ID Software Project and Consultancy Services",
    "versions": [
      {
        "lessThan": "0",
        "status": "affected",
        "version": "1.0.0.347",
        "versionType": "custom"
      }
    ]
  }
]

References

www.usom.gov.tr/bildirim/tr-23-0022