CVE-2022-46786

Published: Feb 23, 2023Modified: Nov 21, 2024

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows XSS (issue 2 of 2).

Affected (3)

Products: Squaredup: Dashboard Server

1 product

Dashboard Server

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Squaredup Dashboard Server	Before 5.7.1.9085
Squaredup Dashboard Server	Before 5.7.1.9085
Squaredup Dashboard Server	Before 5.7.1.9085

Related CWEs

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (4)

https://scomsupport.squaredup.com/hc/en-us/articles/9476419759005-CVE-2022-46786-Stored-Cross-Site-Scripting

Source: cve@mitre.org

Vendor Advisory

https://support.squaredup.com

Source: cve@mitre.org

Product

https://scomsupport.squaredup.com/hc/en-us/articles/9476419759005-CVE-2022-46786-Stored-Cross-Site-Scripting

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.squaredup.com

Source: af854a3a-2127-422b-91ae-364da2661108

Product

Timeline

No history available yet.