VULNERABILITY INTELLIGENCE
CVE-2022-28623
CVSS score9.8 CRITICAL
EPSS probability0.90%
CISA KEVNot currently listed
Published2022-07-08
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Security vulnerabilities in HPE IceWall SSO 10.0 certd could be exploited remotely to allow SQL injection or unauthorized data injection. HPE has provided the following updated modules to resolve these vulnerabilities. HPE IceWall SSO version 10.0 certd library Patch 9 for RHEL and HPE IceWall SSO version 10.0 certd library Patch 9 for HP-UX.
Weakness classification
- nvd@nist.gov: CWE-89
Primary references
- security-alert@hpe.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory