2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-43893 | MEDIUM | 4.4 | 0.4% | Oct 17, 2023 | IBM Security Verify Privilege On-Premises 11.5 could allow a privileged user to cause by using a malicious payload. IB... |
| CVE-2022-43889 | MEDIUM | 5.3 | 0.5% | Oct 17, 2023 | IBM Security Verify Privilege On-Premises 11.5 could disclose sensitive information through an HTTP request that could ... |
| CVE-2022-22386 | MEDIUM | 5.9 | 0.5% | Oct 17, 2023 | IBM Security Verify Privilege On-Premises 11.5 could allow a remote attacker to obtain sensitive information, caused by... |
| CVE-2022-22380 | MEDIUM | 4.3 | 0.2% | Oct 17, 2023 | IBM Security Verify Privilege On-Premises 11.5 could allow an attacker to spoof a trusted entity due to improperly vali... |
| CVE-2022-22384 | MEDIUM | 4.3 | 0.4% | Oct 17, 2023 | IBM Security Verify Privilege On-Premises 11.5 could allow an attacker to modify messages returned from the server due ... |
| CVE-2022-22377 | MEDIUM | 5.3 | 0.5% | Oct 17, 2023 | IBM Security Verify Privilege On-Premises 11.5 could allow a remote attacker to obtain sensitive information, caused by ... |
| CVE-2022-48612 | MEDIUM | 6.1 | 0.4% | Oct 16, 2023 | A Universal Cross Site Scripting (UXSS) vulnerability in ClassLink OneClick Extension through 10.7 allows remote attacke... |
| CVE-2022-43868 | MEDIUM | 5.3 | 0.4% | Oct 14, 2023 | IBM Security Verify Access OIDC Provider could disclose directory information that could aid attackers in further attack... |
| CVE-2022-33161 | MEDIUM | 5.9 | 0.4% | Oct 14, 2023 | IBM Security Directory Server 6.4.0 could allow a remote attacker to obtain sensitive information, caused by the failure... |
| CVE-2022-44758 | MEDIUM | 5.3 | 0.3% | Oct 11, 2023 | BigFix Insights/IVR fixlet uses improper credential handling within certain fixlet content. An attacker can gain access... |
| CVE-2022-42451 | MEDIUM | 4.4 | 0.1% | Oct 11, 2023 | Certain credentials within the BigFix Patch Management Download Plug-ins are stored insecurely and could be exposed to a... |
| CVE-2022-48183 | MEDIUM | 6.8 | 0.3% | Oct 9, 2023 | A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS tamper detection mechanism t... |
| CVE-2022-48182 | MEDIUM | 6.8 | 0.3% | Oct 9, 2023 | A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS tamper detection mechanism t... |
| CVE-2022-3728 | MEDIUM | 6.8 | 0.3% | Oct 9, 2023 | A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS tamper detection mechanism t... |
| CVE-2022-36228 | MEDIUM | 6.5 | 0.3% | Oct 9, 2023 | Nokelock Smart padlock O1 Version 5.3.0 is vulnerable to Insecure Permissions. By sending a request, you can add any dev... |
| CVE-2022-35950 | MEDIUM | 4.8 | 0.4% | Oct 9, 2023 | OroCommerce is an open-source Business to Business Commerce application. In versions 4.1.0 through 4.1.13, 4.2.0 through... |
| CVE-2022-34355 | MEDIUM | 5.5 | 0.2% | Oct 6, 2023 | IBM Jazz Foundation (IBM Engineering Lifecycle Management 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2) could disclose sensitiv... |
| CVE-2022-4145 | MEDIUM | 5.3 | 0.6% | Oct 5, 2023 | A content spoofing flaw was found in OpenShift's OAuth endpoint. This flaw allows a remote, unauthenticated attacker to ... |
| CVE-2022-36277 | MEDIUM | 6.1 | 0.3% | Oct 4, 2023 | The 'sReferencia', 'sDescripcion', 'txtCodigo' and 'txtDescripcion' parameters, in the frmGestionStock.aspx and frmEditS... |
| CVE-2022-43906 | MEDIUM | 5.3 | 0.4% | Oct 4, 2023 | IBM Security Guardium 11.5 could disclose sensitive information due to a missing or insecure SameSite attribute for a se... |
| CVE-2022-4132 | MEDIUM | 5.9 | 0.7% | Oct 4, 2023 | A flaw was found in JSS. A memory leak in JSS requires non-standard configuration but is a low-effort DoS vector if conf... |
| CVE-2022-47187 | MEDIUM | 6.1 | 0.4% | Sep 28, 2023 | There is a file upload XSS vulnerability in Generex CS141 below 2.06 version. The web application allows file uploading,... |
| CVE-2022-4245 | MEDIUM | 4.3 | 0.7% | Sep 25, 2023 | A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comme... |
| CVE-2022-4137 | MEDIUM | 6.1 | 1.1% | Sep 25, 2023 | A reflected cross-site scripting (XSS) vulnerability was found in the 'oob' OAuth endpoint due to incorrect null-byte ha... |
| CVE-2022-3962 | MEDIUM | 4.3 | 0.7% | Sep 23, 2023 | A content spoofing vulnerability was found in Kiali. It was discovered that Kiali does not implement error handling when... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now