CVE-2022-31648

Talend Administration Center is vulnerable to a reflected Cross-Site Scripting (XSS) issue in the SSO login endpoint. The issue is fixed for versions 8.0.x in TPS-5233, for versions 7.3.x in TPS-5324, and for versions 7.2.x in TPS-5235. Earlier versions of Talend Administration Center may also be impacted; users are encouraged to update to a supported version.

• CWE-79

• https://talend.comVendor Advisory
• https://www.talend.com/security/incident-response/#CVE-2022-31648Vendor Advisory
• https://talend.comVendor Advisory
• https://www.talend.com/security/incident-response/#CVE-2022-31648Vendor Advisory

Published

May 26, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-31642Potential vulnerabilities have been identified in the system…7
• CVE-2022-31643A potential security vulnerability has been identified in th…5.5
• CVE-2022-31644Potential vulnerabilities have been identified in the system…7.8
• CVE-2022-31645Potential vulnerabilities have been identified in the system…7.8
• CVE-2022-31646Potential vulnerabilities have been identified in the system…7.8
• CVE-2022-31647Docker Desktop before 4.6.0 on Windows allows attackers to d…7.1
• CVE-2022-31649ownCloud owncloud/core before 10.10.0 Improperly Removes Sen…7.5
• CVE-2022-3165An integer underflow issue was found in the QEMU VNC server …6.5
• CVE-2022-31650In SoX 14.4.2, there is a floating-point exception in lsx_ai…5.5
• CVE-2022-31651In SoX 14.4.2, there is an assertion failure in rate_init in…5.5
• CVE-2022-31654VMware vRealize Log Insight in versions prior to 8.8.2 conta…5.4
• CVE-2022-31655VMware vRealize Log Insight in versions prior to 8.8.2 conta…5.4