CVE-2022-4559

A vulnerability was found in INEX IPX-Manager up to 6.2.0. It has been declared as problematic. This vulnerability affects unknown code of the file resources/views/customer/list.foil.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 6.3.0 is able to address this issue. The name of the patch is bc9b14c6f70cccdb89b559e8bc3a7318bfe9c243. It is recommended to upgrade the affected component. VDB-215962 is the identifier assigned to this vulnerability.

• CWE-707

• https://github.com/inex/IXP-Manager/commit/bc9b14c6f70cccdb89b559e8bc3a7318bfe9c243Patch, Third Party Advisory
• https://github.com/inex/IXP-Manager/releases/tag/v6.3.0Release Notes, Third Party Advisory
• https://vuldb.com/?id.215962Permissions Required, Third Party Advisory
• https://github.com/inex/IXP-Manager/commit/bc9b14c6f70cccdb89b559e8bc3a7318bfe9c243Patch, Third Party Advisory
• https://github.com/inex/IXP-Manager/releases/tag/v6.3.0Release Notes, Third Party Advisory
• https://vuldb.com/?id.215962Permissions Required, Third Party Advisory

Published

Dec 16, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-4558A vulnerability was found in Alinto SOGo up to 5.7.1. It has…6.1
• CVE-2022-45582Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 …6.1
• CVE-2022-45586Stack overflow vulnerability in function Dict::find in xpdf/…5.5
• CVE-2022-45587Stack overflow vulnerability in function gmalloc in goo/gmem…5.5
• CVE-2022-45588All versions before R2022-09 of Talend's Remote Engine Gen 2…7.8
• CVE-2022-45589All versions before 8.0.1-R2022-10-RT and 7.3.1-R2022-09-RT …7.2
• CVE-2022-45597ComponentSpace.Saml2 4.4.0 Missing SSL Certificate Validatio…9.8
• CVE-2022-45598Cross Site Scripting vulnerability in Joplin Desktop App bef…6.1
• CVE-2022-45599Aztech WMB250AC Mesh Routers Firmware Version 016 2020 is vu…9.8
• CVE-2022-4560A vulnerability was found in Joget up to 7.0.31. It has been…6.1
• CVE-2022-45600Aztech WMB250AC Mesh Routers Firmware Version 016 2020 devic…8.8
• CVE-2022-45608An issue was discovered in ThingsBoard 3.4.1, allows low pri…8.8