CVE-2022-29887

Summary

Cross-site Scripting (XSS) in some Intel(R) Manageability Commander software before version 2.3 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

Affected Software

VendorProductVersion RangeStatus
n/aIntel(R) Manageability Commander softwarebefore version 2.3affected

Weaknesses

  • escalation of privilege
  • CWE-79: Cross-site Scripting (XSS)

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References