2022 CVE Vulnerabilities

27,563 CVEs published in 2022.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2022-30187MEDIUM4.7Azure Storage Library Information Disclosure Vulnerability
CVE-2022-30181MEDIUM6.5Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-29602MEDIUM5.4The gridelements (aka Grid Elements) extension through 7.6.1, 8.x through 8.7.0, 9.x through 9.7.0, and 10.x through 10....
CVE-2022-22711MEDIUM5.7Windows BitLocker Information Disclosure Vulnerability
CVE-2022-22048MEDIUM6.1BitLocker Security Feature Bypass Vulnerability
CVE-2022-22042MEDIUM6.5Windows Hyper-V Information Disclosure Vulnerability
CVE-2022-22041MEDIUM6.8Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-22028MEDIUM5.9Windows Network File System Information Disclosure Vulnerability
CVE-2022-22023MEDIUM6.6Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability
CVE-2022-21845MEDIUM4.7Windows Kernel Information Disclosure Vulnerability
CVE-2022-33155MEDIUM5.4The ameos_tarteaucitron (aka AMEOS - TarteAuCitron GDPR cookie banner and tracking management / French RGPD compatible) ...
CVE-2022-33154MEDIUM5.4The schema (aka Embedding schema.org vocabulary) extension before 1.13.1 and 2.x before 2.5.1 for TYPO3 allows XSS.
CVE-2022-31102MEDIUM6.1Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD starting with 2.3.0 and prior to 2.3.6...
CVE-2022-35227MEDIUM6.1A vulnerability in SAP NW EP (WPC) - versions 7.30, 7.31, 7.40, 7.50, which does not sufficiently validate user-controll...
CVE-2022-35225MEDIUM6.1SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-c...
CVE-2022-35224MEDIUM6.1SAP Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled ...
CVE-2022-35172MEDIUM6.1SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-c...
CVE-2022-35171MEDIUM5.5When a user opens manipulated JPEG 2000 (.jp2, jp2k.x3d) files received from untrusted sources in SAP 3D Visual Enterpri...
CVE-2022-35170MEDIUM6.1SAP NetWeaver Enterprise Portal does - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, not sufficiently encode user-c...
CVE-2022-35169MEDIUM6SAP BusinessObjects Business Intelligence Platform (LCM) - versions 420, 430, allows an attacker with an admin privilege...
CVE-2022-32248MEDIUM5.3Due to missing input validation in the Manage Checkbooks component of SAP S/4HANA - version 101, 102, 103, 104, 105, 106...
CVE-2022-32247MEDIUM6.1SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution ...
CVE-2022-32246MEDIUM4.6SAP Busines Objects Business Intelligence Platform (Visual Difference Application) - versions 420, 430, allows an authen...
CVE-2022-31655MEDIUM5.4VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improp...
CVE-2022-31654MEDIUM5.4VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improp...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now