2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-34001 | MEDIUM | 6.5 | 0.7% | Jul 19, 2022 | Unit4 ERP through 7.9 allows XXE via ExecuteServerProcessAsynchronously. |
| CVE-2022-22417 | MEDIUM | 5.4 | 0.4% | Jul 19, 2022 | IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to cross-site scripting. This vuln... |
| CVE-2022-22416 | MEDIUM | 5.4 | 0.4% | Jul 19, 2022 | IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to server-side request forgery (SS... |
| CVE-2022-22360 | HIGH | 8.8 | 1.4% | Jul 19, 2022 | IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 could allow a remote authenticated attacker to c... |
| CVE-2022-22359 | MEDIUM | 6.5 | 0.3% | Jul 19, 2022 | IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to cross-site request forgery whic... |
| CVE-2022-22358 | HIGH | 7.1 | 1.0% | Jul 19, 2022 | IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to an XML External Entity Injectio... |
| CVE-2022-35912 | CRITICAL | 9.8 | 1.7% | Jul 19, 2022 | In grails-databinding in Grails before 3.3.15, 4.x before 4.1.1, 5.x before 5.1.9, and 5.2.x before 5.2.1 (at least when... |
| CVE-2022-2469 | HIGH | 8.1 | 1.1% | Jul 19, 2022 | GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client |
| CVE-2022-27580 | HIGH | 7.8 | 0.3% | Jul 19, 2022 | A deserialization vulnerability in a .NET framework class used and not properly checked by Safety Designer all versions ... |
| CVE-2022-27579 | HIGH | 7.8 | 0.3% | Jul 19, 2022 | A deserialization vulnerability in a .NET framework class used and not properly checked by Flexi Soft Designer in all ve... |
| CVE-2022-27545 | MEDIUM | 5.4 | 0.3% | Jul 19, 2022 | BigFix Web Reports authorized users may perform HTML injection for the email administrative configuration page. |
| CVE-2022-27544 | MEDIUM | 6.5 | 0.5% | Jul 19, 2022 | BigFix Web Reports authorized users may see SMTP credentials in clear text. |
| CVE-2022-35405 | CRITICAL | 9.8 | 99.9% | Jul 19, 2022 | Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote code... |
| CVE-2022-2193 | HIGH | 8.8 | 0.7% | Jul 19, 2022 | Insecure Direct Object Reference vulnerability in HYPR Server before version 6.14.1 allows remote authenticated attacker... |
| CVE-2022-2192 | HIGH | 8.8 | 0.8% | Jul 19, 2022 | Forced Browsing vulnerability in HYPR Server version 6.10 to 6.15.1 allows remote attackers with a valid one-time recove... |
| CVE-2022-24082 | CRITICAL | 9.8 | 9.5% | Jul 19, 2022 | If an on-premise installation of the Pega Platform is configured with the port for the JMX interface exposed to the Inte... |
| CVE-2022-1984 | HIGH | 7.8 | 0.2% | Jul 19, 2022 | This issue affects: HYPR Windows WFA versions prior to 7.2; Unsafe Deserialization vulnerability in HYPR Workforce Acces... |
| CVE-2022-30302 | HIGH | 8.1 | 0.8% | Jul 19, 2022 | Multiple relative path traversal vulnerabilities [CWE-23] in FortiDeceptor management interface 1.0.0 through 3.2.x, 3.3... |
| CVE-2022-30301 | MEDIUM | 6.7 | 0.2% | Jul 19, 2022 | A path traversal vulnerability [CWE-22] in FortiAP-U CLI 6.2.0 through 6.2.3, 6.0.0 through 6.0.4, 5.4.0 through 5.4.6 m... |
| CVE-2022-2454 | HIGH | 7.8 | 0.4% | Jul 19, 2022 | Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.1-DEV. |
| CVE-2022-2453 | HIGH | 7.8 | 0.4% | Jul 19, 2022 | Use After Free in GitHub repository gpac/gpac prior to 2.1-DEV. |
| CVE-2022-29060 | HIGH | 8.1 | 0.6% | Jul 19, 2022 | A use of hard-coded cryptographic key vulnerability [CWE-321] in FortiDDoS API 5.5.0 through 5.5.1, 5.4.0 through 5.4.2,... |
| CVE-2022-29057 | MEDIUM | 5.4 | 0.5% | Jul 19, 2022 | A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiEDR version 5.1.... |
| CVE-2022-27483 | HIGH | 7.2 | 2.1% | Jul 19, 2022 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiManager ve... |
| CVE-2022-26113 | HIGH | 7.1 | 0.3% | Jul 19, 2022 | An execution with unnecessary privileges vulnerability [CWE-250] in FortiClientWindows 7.0.0 through 7.0.3, 6.4.0 throug... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now