VULNERABILITY INTELLIGENCE

CVE-2022-1414

CVSS score8.8 HIGH
EPSS probability0.92%
CISA KEVNot currently listed
Published2022-10-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

3scale API Management 2 does not perform adequate sanitation for user input in multiple fields. An authenticated user could use this flaw to inject scripts and possibly gain access to sensitive information or conduct further attacks.

Weakness classification

  • secalert@redhat.com: CWE-1173
  • nvd@nist.gov: CWE-20

Primary references