VULNERABILITY INTELLIGENCE

CVE-2022-30277

CVSS score5.7 MEDIUM
EPSS probability0.23%
CISA KEVNot currently listed
Published2022-06-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

Description

BD Synapsys™, versions 4.20, 4.20 SR1, and 4.30, contain an insufficient session expiration vulnerability. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information (ePHI), protected health information (PHI) and personally identifiable information (PII).

Weakness classification

  • cybersecurity@bd.com: CWE-613
  • nvd@nist.gov: CWE-613

Primary references