VULNERABILITY INTELLIGENCE

CVE-2022-3339

CVSS score5.4 MEDIUM
EPSS probability0.78%
CISA KEVNot currently listed
Published2022-10-18
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Description

A reflected cross-site scripting (XSS) vulnerability in ePO prior to 5.10 Update 14 allows a remote unauthenticated attacker to potentially obtain access to an ePO administrator's session by convincing the authenticated ePO administrator to click on a carefully crafted link. This would lead to limited access to sensitive information and limited ability to alter some information in ePO.

Weakness classification

  • trellixpsirt@trellix.com: CWE-79
  • nvd@nist.gov: CWE-79

Primary references