CVE-2022-44012

An issue was discovered in /DS/LM_API/api/SelectionService/InsertQueryWithActiveRelationsReturnId in Simmeth Lieferantenmanager before 5.6. An attacker can execute JavaScript code in the browser of the victim if a site is loaded. The victim's encrypted password can be stolen and most likely be decrypted.

• CWE-79
• CWE-79

• https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-simmeth-system-gmbh-lieferantenmanager/Exploit, Third Party Advisory
• https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-simmeth-system-gmbh-lieferantenmanager/Exploit, Third Party Advisory

Published

Dec 25, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-44007An issue was discovered in BACKCLICK Professional 5.9.63. Du…8.8
• CVE-2022-44008An issue was discovered in BACKCLICK Professional 5.9.63. Du…6.5
• CVE-2022-44009Improper access control in Key-Value RBAC in StackStorm vers…7.5
• CVE-2022-4401A vulnerability was found in pallidlight online-course-selec…5.4
• CVE-2022-44010An issue was discovered in ClickHouse before 22.9.1.2603. An…7.5
• CVE-2022-44011An issue was discovered in ClickHouse before 22.9.1.2603. An…6.5
• CVE-2022-44013An issue was discovered in Simmeth Lieferantenmanager before…9.1
• CVE-2022-44014An issue was discovered in Simmeth Lieferantenmanager before…6.5
• CVE-2022-44015An issue was discovered in Simmeth Lieferantenmanager before…9.8
• CVE-2022-44016An issue was discovered in Simmeth Lieferantenmanager before…7.5
• CVE-2022-44017An issue was discovered in Simmeth Lieferantenmanager before…7.5
• CVE-2022-44018In Softing uaToolkit Embedded before 1.40.1, a malformed Pub…7.5