VULNERABILITY INTELLIGENCE

CVE-2022-45895

CVSS score6.5 MEDIUM

EPSS probability0.74%

CISA KEVNot currently listed

Published2022-12-25

Last modified2026-06-17

Description

Planet eStream before 6.72.10.07 discloses sensitive information, related to the ON cookie (findable in HTML source code for Default.aspx in some situations) and the WhoAmI endpoint (e.g., path disclosure).