CVE-2022-46823criticalCWE-79

CVE-2022-46823: falha crítica em Siemens Mendix SAML (Mendix 8 compatible)

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Mendix SAML

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.3epss 0.5%
A vulnerability has been identified in Mendix SAML (Mendix 8 compatible) (All versions >= V2.3.0 < V2.3.4), Mendix SAML (Mendix 9 compatible, New Track) (All versions >= V3.3.0 < V3.3.9), Mendix SAML (Mendix 9 compatible, Upgrade Track) (All versions >= V3.3.0 < V3.3.8). The affected module is vulnerable to reflected cross-site scripting (XSS) attacks. This could allow an attacker to extract sensitive information by tricking users into accessing a malicious link.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N/E:P/RL:O/RC:C
Produtos afetados
Siemens · Mendix SAML (Mendix 8 compatible)Siemens · Mendix SAML (Mendix 9 compatible, New Track)Siemens · Mendix SAML (Mendix 9 compatible, Upgrade Track)
CVEs relacionadas — Siemens Mendix SAML (Mendix 8 compatible)

No mesmo produto, das mais perigosas para as menos.

CVE-2022-37011—CVE-2022-37011EPSS 1.2%CVE-2023-29129CRITICALCVE-2023-29129EPSS 0.9%CVE-2022-44457CRITICALCVE-2022-44457EPSS 0.8%CVE-2023-25957CRITICALCVE-2023-25957EPSS 0.6%