CVE-2022-37028

Summary

ISAMS 22.2.3.2 is prone to stored Cross-site Scripting (XSS) attack on the title field for groups, allowing an attacker to store a JavaScript payload that will be executed when another user uses the application.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://excellium-services.com/cert-xlm-advisory/CVE-2022-37028
• https://www.isams.com/

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://excellium-services.com/cert-xlm-advisory/CVE-2022-37028
• https://www.isams.com/
• https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-37028

• ←Previous
• Next→