CVE-2022-29540

resi-calltrace in RESI Gemini-Net 4.2 is affected by Multiple XSS issues. Unauthenticated remote attackers can inject arbitrary web script or HTML into an HTTP GET parameter that reflects user input without sanitization. This exists on numerous application endpoints,

• CWE-79

• https://www.gruppotim.it/it/footer/red-team.htmlThird Party Advisory
• https://www.resi.it/prodotti-soluzioni-commerciali/gemini-network-service-monitoringProduct
• https://www.gruppotim.it/it/footer/red-team.htmlThird Party Advisory
• https://www.resi.it/prodotti-soluzioni-commerciali/gemini-network-service-monitoringProduct

Published

Jun 2, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-29534An issue was discovered in MISP before 2.4.158. In UsersCont…7.5
• CVE-2022-29535Zoho ManageEngine OPManager through 125588 allows SQL Inject…9.8
• CVE-2022-29536In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML …7.5
• CVE-2022-29537gp_rtp_builder_do_hevc in ietf/rtp_pck_mpeg4.c in GPAC 2.0.0…5.5
• CVE-2022-29538RESI Gemini-Net Web 4.2 is affected by Improper Access Contr…5.3
• CVE-2022-29539resi-calltrace in RESI Gemini-Net 4.2 is affected by OS Comm…9.8
• CVE-2022-29546HtmlUnit NekoHtml Parser before 2.61.0 suffers from a denial…7.5
• CVE-2022-29547The CreateRedirect extension before 2022-04-14 for MediaWiki…7.5
• CVE-2022-29548A reflected XSS issue exists in the Management Console of se…6.1
• CVE-2022-29549An issue was discovered in Qualys Cloud Agent 4.8.0-49. It e…7.3
• CVE-2022-29550An issue was discovered in Qualys Cloud Agent 4.8.0-49. It w…5.5
• CVE-2022-29555The Deviceconnect microservice through 1.3.0 in Northern.tec…8.8