Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-29095

Опубликовано: 10 июн. 2022
Источник: nvd
CVSS3: 8.3
CVSS3: 9.6
CVSS2: 7.6
EPSS Низкий

Описание

Dell SupportAssist Client Consumer versions (3.10.4 and prior) and Dell SupportAssist Client Commercial versions (3.1.1 and prior) contain a cross-site scripting vulnerability. A remote unauthenticated malicious user could potentially exploit this vulnerability under specific conditions leading to execution of malicious code on a vulnerable system.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:dell:supportassist_for_business_pcs:*:*:*:*:*:*:*:*
Версия до 3.1.1 (включая)
cpe:2.3:a:dell:supportassist_for_home_pcs:*:*:*:*:*:*:*:*
Версия до 3.10.4 (включая)

EPSS

Процентиль: 72%
0.00722
Низкий

8.3 High

CVSS3

9.6 Critical

CVSS3

7.6 High

CVSS2

Дефекты

CWE-16
CWE-79

Связанные уязвимости

CVSS3: 9.6
github
больше 3 лет назад

Dell SupportAssist Client Consumer versions (3.10.4 and prior) and Dell SupportAssist Client Commercial versions (3.1.1 and prior) contain a cross-site scripting vulnerability. A remote unauthenticated malicious user could potentially exploit this vulnerability under specific conditions leading to execution of malicious code on a vulnerable system.

EPSS

Процентиль: 72%
0.00722
Низкий

8.3 High

CVSS3

9.6 Critical

CVSS3

7.6 High

CVSS2

Дефекты

CWE-16
CWE-79