CVE-2022-38489 MEDIUM

CVE-2022-38489

Vendor N/A
Product n/a
Published January 10, 2023
Last update April 9, 2025
View on NVD All CVEs

CVSS base score

4.8/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AC:L/AV:N/A:N/C:L/I:L/PR:H/S:C/UI:R

What the vulnerability does

01Description

An issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03 It is prone to stored Cross-site Scripting (XSS). Version 2022.1.110.1.02 fixes the vulnerably.

Key dates

02Disclosure timeline

January 10, 2023 CVE published
April 9, 2025 Record updated