CVE-2022-37775

Опубликовано: 16 сент. 2022

Источник: nvd

CVSS3: 6.1

EPSS Низкий

Описание

Genesys PureConnect Interaction Web Tools Chat Service (up to at least 26- September- 2019) allows XSS within the Printable Chat History via the participant -> name JSON POST parameter.

Ссылки

http://genesys.com
Product
http://packetstormsecurity.com/files/168410/Genesys-PureConnect-Cross-Site-Scripting.html
Exploit
Third Party Advisory
https://cxsecurity.com/issue/WLB-2022090038
Exploit
Third Party Advisory
https://help.genesys.com/pureconnect/mergedprojects/wh_tr/desktop/pdfs/web_tools_dg.pdf
Vendor Advisory
http://genesys.com
Product
http://packetstormsecurity.com/files/168410/Genesys-PureConnect-Cross-Site-Scripting.html
Exploit
Third Party Advisory
https://cxsecurity.com/issue/WLB-2022090038
Exploit
Third Party Advisory
https://help.genesys.com/pureconnect/mergedprojects/wh_tr/desktop/pdfs/web_tools_dg.pdf
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:genesys:pureconnect:*:*:*:*:*:*:*:*

Версия до 2022-09-26 (включая)

EPSS

Процентиль: 64%

0.0047

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-27pq-p52w-4h65