exploitDog

CVE-2022-38115

Опубликовано: 23 нояб. 2022

Источник: nvd

CVSS3: 5.3

EPSS Низкий

Описание

Insecure method vulnerability in which allowed HTTP methods are disclosed. E.g., OPTIONS, DELETE, TRACE, and PUT

Ссылки

https://documentation.solarwinds.com/en/success_center/sem/content/release_notes/sem_2022-4_release_notes.htm
Release Notes
Vendor Advisory
https://www.solarwinds.com/trust-center/security-advisories/CVE-2022-38115
Vendor Advisory
https://documentation.solarwinds.com/en/success_center/sem/content/release_notes/sem_2022-4_release_notes.htm
Release Notes
Vendor Advisory
https://www.solarwinds.com/trust-center/security-advisories/CVE-2022-38115
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:solarwinds:security_event_manager:*:*:*:*:*:*:*:*

Версия до 2022.2 (исключая)

EPSS

Процентиль: 50%

0.00674

Низкий

5.3 Medium

CVSS3

Дефекты

CWE-650

CWE-436

Связанные уязвимости

GHSA-4528-vmxj-v97w

CVSS3: 5.3

github

почти 4 года назад

Insecure method vulnerability in which allowed HTTP methods are disclosed. E.g., OPTIONS, DELETE, TRACE, and PUT

EPSS

Процентиль: 50%

0.00674

Низкий

5.3 Medium

CVSS3

Дефекты

CWE-650

CWE-436