CVE-2022-40183 MEDIUM

CVE-2022-40183: Reflected Cross Site Scripting (XSS) in VIDEOJET multi 4000

Vendor Bosch
Product VIDEOJET multi 4000
Weakness CWE-79 · XSS
Published October 27, 2022
Last update May 5, 2025
View on NVD All CVEs

CVSS base score

5.8/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L

What the vulnerability does

01Description

An error in the URL handler of the VIDEOJET multi 4000 may lead to a reflected cross site scripting (XSS) in the web-based interface. An attacker with knowledge of the encoder address can send a crafted link to a user, which will execute JavaScript code in the context of the user.

Key dates

02Disclosure timeline

October 27, 2022 CVE published
May 5, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2023-20146 Cisco Small Business RV016, RV042, RV042G, RV082 , RV320, and RV325 Routers Cross-Site Scripting Vulnerabilities CVE-2022-1265 BulletProof Security < 6.1 - Admin+ Stored Cross-Site Scripting CVE-2019-25244 Legrand BTicino Driver Manager F454 1.0.51 CSRF and Stored XSS Vulnerabilities CVE-2023-2393 Netgear SRX5308 Web Management Interface cross site scripting CVE-2025-4220 Xavin's List Subpages <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting