2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-42446 | MEDIUM | 6.5 | 0.4% | Dec 12, 2022 | Starting with Sametime 12, anonymous users are enabled by default. After logging in as an anonymous user, one has the ab... |
| CVE-2022-42445 | MEDIUM | 4.9 | 0.5% | Dec 12, 2022 | HCL Launch could allow a user with administrative privileges, including "Manage Security" permissions, the ability to re... |
| CVE-2022-3510 | HIGH | 7.5 | 0.5% | Dec 12, 2022 | A parsing issue similar to CVE-2022-3171, but with Message-Type Extensions in protobuf-java core and lite versions prior... |
| CVE-2022-3509 | HIGH | 7.5 | 0.6% | Dec 12, 2022 | A parsing issue similar to CVE-2022-3171, but with textformat in protobuf-java core and lite versions prior to 3.21.7, 3... |
| CVE-2022-38661 | HIGH | 7.1 | 0.2% | Dec 12, 2022 | HCL Workload Automation could allow a local user to overwrite key system files which would cause the system to crash. |
| CVE-2022-38656 | CRITICAL | 9.8 | 0.7% | Dec 12, 2022 | HCL Commerce, when using Elasticsearch, can allow a remote attacker to cause a denial of service attack on the site and ... |
| CVE-2022-38395 | HIGH | 7.8 | 2.8% | Dec 12, 2022 | HP Support Assistant uses HP Performance Tune-up as a diagnostic tool. HP Support Assistant uses Fusion to launch HP Per... |
| CVE-2022-37932 | CRITICAL | 9.8 | 2.6% | Dec 12, 2022 | A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S... |
| CVE-2022-37930 | MEDIUM | 5.5 | 0.2% | Dec 12, 2022 | A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays and HPE Nimble Storage Secondary ... |
| CVE-2022-37929 | MEDIUM | 5.5 | 0.1% | Dec 12, 2022 | Improper Privilege Management vulnerability in Hewlett Packard Enterprise Nimble Storage Hybrid Flash Arrays and Nimble ... |
| CVE-2022-37928 | MEDIUM | 6.5 | 0.3% | Dec 12, 2022 | Insufficient Verification of Data Authenticity vulnerability in Hewlett Packard Enterprise HPE Nimble Storage Hybrid Fla... |
| CVE-2022-37927 | MEDIUM | 6.1 | 0.4% | Dec 12, 2022 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Hewlett Packard Enterprise HPE OneView Global Dashb... |
| CVE-2022-37926 | MEDIUM | 5.4 | 0.5% | Dec 12, 2022 | A vulnerability within the web-based management interface of EdgeConnect Enterprise could allow a remote attacker to con... |
| CVE-2022-37925 | MEDIUM | 6.1 | 0.5% | Dec 12, 2022 | A vulnerability within the web-based management interface of Aruba EdgeConnect Enterprise could allow a remote attacker ... |
| CVE-2022-37924 | HIGH | 7.2 | 1.5% | Dec 12, 2022 | Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbit... |
| CVE-2022-37923 | HIGH | 7.2 | 1.4% | Dec 12, 2022 | Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbit... |
| CVE-2022-37922 | HIGH | 7.2 | 1.4% | Dec 12, 2022 | Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbit... |
| CVE-2022-37921 | HIGH | 7.2 | 1.4% | Dec 12, 2022 | Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbit... |
| CVE-2022-37920 | HIGH | 7.2 | 1.4% | Dec 12, 2022 | Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbit... |
| CVE-2022-37919 | HIGH | 7.5 | 0.7% | Dec 12, 2022 | A vulnerability exists in the API of Aruba EdgeConnect Enterprise. An unauthenticated attacker can exploit this conditio... |
| CVE-2022-37912 | HIGH | 8.8 | 1.6% | Dec 12, 2022 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of ... |
| CVE-2022-37911 | MEDIUM | 5.5 | 0.6% | Dec 12, 2022 | Due to improper restrictions on XML entities multiple vulnerabilities exist in the command line interface of ArubaOS. A ... |
| CVE-2022-37910 | MEDIUM | 6.5 | 0.6% | Dec 12, 2022 | A buffer overflow vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerabil... |
| CVE-2022-37909 | MEDIUM | 5.3 | 0.3% | Dec 12, 2022 | Aruba has identified certain configurations of ArubaOS that can lead to sensitive information disclosure from the config... |
| CVE-2022-37908 | MEDIUM | 6.5 | 0.2% | Dec 12, 2022 | An authenticated attacker can impact the integrity of the ArubaOS bootloader on 7xxx series controllers. Successful expl... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now