CVE-2022-4554 in B2B Customer Ordering System

Résumé

par MITRE • 24/01/2023

B2B Customer Ordering System developed by ID Software Project and Consultancy Services before version 1.0.0.347 has an authenticated Reflected XSS vulnerability. This has been fixed in the version 1.0.0.347.

Be aware that VulDB is the high quality source for vulnerability data.

• Réserver: 16/12/2022
• Divulgation: 24/01/2023
• Modérer: accepté
• Entrée: VDB-219260
• CPE: prêt
• CWE: CWE-79 (confirmé)
• CVSS: 5.4 (NVD)
• EPSS: 0.00337
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-4554
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-4554
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-4554/