2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-20833 | MEDIUM | 4.8 | 0.4% | Nov 15, 2022 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could... |
| CVE-2022-20832 | MEDIUM | 4.8 | 0.4% | Nov 15, 2022 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could... |
| CVE-2022-20831 | MEDIUM | 4.8 | 0.4% | Nov 15, 2022 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could... |
| CVE-2022-20826 | MEDIUM | 6.8 | 0.3% | Nov 15, 2022 | A vulnerability in the secure boot implementation of Cisco Secure Firewalls 3100 Series that are running Cisco Adaptive ... |
| CVE-2022-45401 | MEDIUM | 5.4 | 0.6% | Nov 15, 2022 | Jenkins Associated Files Plugin 0.2.1 and earlier does not escape names of associated files, resulting in a stored cross... |
| CVE-2022-45399 | MEDIUM | 4.3 | 0.5% | Nov 15, 2022 | A missing permission check in Jenkins Cluster Statistics Plugin 0.4.6 and earlier allows attackers to delete recorded Je... |
| CVE-2022-45398 | MEDIUM | 4.3 | 0.4% | Nov 15, 2022 | A cross-site request forgery (CSRF) vulnerability in Jenkins Cluster Statistics Plugin 0.4.6 and earlier allows attacker... |
| CVE-2022-45394 | MEDIUM | 4.3 | 0.5% | Nov 15, 2022 | A missing permission check in Jenkins Delete log Plugin 1.0 and earlier allows attackers with Item/Read permission to de... |
| CVE-2022-45392 | MEDIUM | 6.5 | 0.6% | Nov 15, 2022 | Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.143 and earlier stores passwords unencrypted in job config.... |
| CVE-2022-45390 | MEDIUM | 4.3 | 0.5% | Nov 15, 2022 | A missing permission check in Jenkins loader.io Plugin 1.0.1 and earlier allows attackers with Overall/Read permission t... |
| CVE-2022-45389 | MEDIUM | 5.3 | 0.6% | Nov 15, 2022 | A missing permission check in Jenkins XP-Dev Plugin 1.0 and earlier allows unauthenticated attackers to trigger builds o... |
| CVE-2022-45387 | MEDIUM | 5.4 | 0.6% | Nov 15, 2022 | Jenkins BART Plugin 1.0.3 and earlier does not escape the parsed content of build logs before rendering it on the Jenkin... |
| CVE-2022-45386 | MEDIUM | 5.5 | 0.3% | Nov 15, 2022 | Jenkins Violations Plugin 0.7.11 and earlier does not configure its XML parser to prevent XML external entity (XXE) atta... |
| CVE-2022-45384 | MEDIUM | 6.5 | 0.6% | Nov 15, 2022 | Jenkins Reverse Proxy Auth Plugin 1.7.3 and earlier stores the LDAP manager password unencrypted in the global config.xm... |
| CVE-2022-45383 | MEDIUM | 6.5 | 0.6% | Nov 15, 2022 | An incorrect permission check in Jenkins Support Core Plugin 1206.v14049fa_b_d860 and earlier allows attackers with Supp... |
| CVE-2022-45382 | MEDIUM | 5.4 | 0.6% | Nov 15, 2022 | Jenkins Naginator Plugin 1.18.1 and earlier does not escape display names of source builds in builds that were triggered... |
| CVE-2022-45380 | MEDIUM | 5.4 | 0.6% | Nov 15, 2022 | Jenkins JUnit Plugin 1159.v0b_396e1e07dd and earlier converts HTTP(S) URLs in test report output to clickable links in a... |
| CVE-2022-41558 | MEDIUM | 5.4 | 0.5% | Nov 15, 2022 | The Visualizations component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analyst, TIBCO Spotfire Ana... |
| CVE-2022-43071 | MEDIUM | 5.5 | 0.3% | Nov 15, 2022 | A stack overflow in the Catalog::readPageLabelTree2(Object*) function of XPDF v4.04 allows attackers to cause a Denial o... |
| CVE-2022-3997 | MEDIUM | 6.1 | 0.4% | Nov 15, 2022 | A vulnerability, which was classified as critical, has been found in MonikaBrzica scm. Affected by this issue is some un... |
| CVE-2022-42001 | MEDIUM | 5.4 | 0.3% | Nov 15, 2022 | Cross-site Scripting (XSS) vulnerability in BlueSpiceBookshelf extension of BlueSpice allows user with regular account a... |
| CVE-2022-42000 | MEDIUM | 5.4 | 0.3% | Nov 15, 2022 | Cross-site Scripting (XSS) vulnerability in BlueSpiceSocialProfile extension of BlueSpice allows user with comment permi... |
| CVE-2022-41814 | MEDIUM | 5.4 | 0.3% | Nov 15, 2022 | Cross-site Scripting (XSS) vulnerability in BlueSpiceFoundation extension of BlueSpice allows user with regular account ... |
| CVE-2022-41789 | MEDIUM | 5.4 | 0.3% | Nov 15, 2022 | Cross-site Scripting (XSS) vulnerability in BlueSpiceDiscovery skin of BlueSpice allows logged in user with edit permiss... |
| CVE-2022-41611 | MEDIUM | 4.8 | 0.3% | Nov 15, 2022 | Cross-site Scripting (XSS) vulnerability in BlueSpiceDiscovery skin of BlueSpice allows user with admin privileges to in... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now