exploitDog

CVE-2022-42711

Опубликовано: 12 окт. 2022

Источник: nvd

CVSS3: 9.6

EPSS Низкий

Описание

In Progress WhatsUp Gold before 22.1.0, an SNMP MIB Walker application endpoint failed to adequately sanitize malicious input. This could allow an unauthenticated attacker to execute arbitrary code in a victim's browser.

Ссылки

https://community.progress.com/s/article/Product-Alert-Bulletin-October-2022
Vendor Advisory
https://www.progress.com/
Vendor Advisory
https://www.progress.com/network-monitoring
Vendor Advisory
https://community.progress.com/s/article/Product-Alert-Bulletin-October-2022
Vendor Advisory
https://www.progress.com/
Vendor Advisory
https://www.progress.com/network-monitoring
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:progress:whatsup_gold:*:*:*:*:*:*:*:*

Версия до 22.1.0 (исключая)

EPSS

Процентиль: 66%

0.00516

Низкий

9.6 Critical

CVSS3

Дефекты

CWE-79

CWE-79

Связанные уязвимости

GHSA-2q6q-v4gf-4wh6

CVSS3: 9.6

github

больше 3 лет назад

In Progress WhatsUp Gold before 22.1.0, an SNMP MIB Walker application endpoint failed to adequately sanitize malicious input. This could allow an unauthenticated attacker to execute arbitrary code in a victim's browser.

EPSS

Процентиль: 66%

0.00516

Низкий

9.6 Critical

CVSS3

Дефекты

CWE-79

CWE-79