2022 CVE Vulnerabilities

27,632 CVEs published in 2022.

CVE IDSeverityCVSSDescription
CVE-2022-32247MEDIUM6.1SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution ...
CVE-2022-32246MEDIUM4.6SAP Busines Objects Business Intelligence Platform (Visual Difference Application) - versions 420, 430, allows an authen...
CVE-2022-31655MEDIUM5.4VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improp...
CVE-2022-31654MEDIUM5.4VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improp...
CVE-2022-31598MEDIUM5.4Due to insufficient input validation, SAP Business Objects - version 420, allows an authenticated attacker to submit a m...
CVE-2022-31597MEDIUM5.4Within SAP S/4HANA - versions S4CORE 101, 102, 103, 104, 105, 106, SAPSCORE 127, the application business partner extens...
CVE-2022-31593HIGH8.8SAP Business One client - version 10.0 allows an attacker with low privileges, to inject code that can be executed by th...
CVE-2022-31592MEDIUM4.3The application SAP Enterprise Extension Defense Forces & Public Security - versions 605, 606, 616,617,618, 802, 803, 80...
CVE-2022-31591HIGH7.8SAP BusinessObjects BW Publisher Service - versions 420, 430, uses a search path that contains an unquoted element. A lo...
CVE-2022-31134MEDIUM4.9Zulip is an open-source team collaboration tool. Zulip Server versions 2.1.0 above have a user interface tool, accessibl...
CVE-2022-31012HIGH7.3Git for Windows is a fork of Git that contains Windows-specific patches. This vulnerability in versions prior to 2.37.1 ...
CVE-2022-2211MEDIUM6.5A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number of matching ke...
CVE-2022-29619MEDIUM6.5Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.x - versions 420,430 allows user Administr...
CVE-2022-29187HIGH7.8Git is a distributed revision control system. Git prior to versions 2.37.1, 2.36.2, 2.35.4, 2.34.4, 2.33.4, 2.32.3, 2.31...
CVE-2022-28771HIGH7.5Due to missing authentication check, SAP Business one License service API - version 10.0 allows an unauthenticated attac...
CVE-2022-22998HIGH7.5Implemented protections on AWS credentials that were not properly protected.
CVE-2022-22997CRITICAL9.8Addressed a remote code execution vulnerability by resolving a command injection vulnerability and closing an AWS S3 buc...
CVE-2022-1737HIGH7.5Pyramid Solutions' affected products, the Developer and DLL kits for EtherNet/IP Adapter and EtherNet/IP Scanner, are vu...
CVE-2022-1025HIGH8.8All unpatched versions of Argo CD starting with v1.0.0 are vulnerable to an improper access control bug, allowing a mali...
CVE-2022-24800HIGH8.1October/System is the system module for October CMS, a self-hosted CMS platform based on the Laravel PHP Framework. Prio...
CVE-2022-2385HIGH8.8A security issue was discovered in aws-iam-authenticator where an allow-listed IAM identity may be able to modify their ...
CVE-2022-29901MEDIUM6.5Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mit...
CVE-2022-29900MEDIUM6.5Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain micr...
CVE-2022-25875MEDIUM6.1The package svelte before 3.49.0 are vulnerable to Cross-site Scripting (XSS) due to improper input sanitization and to ...
CVE-2022-2364MEDIUM5.4A vulnerability, which was classified as problematic, was found in SourceCodester Simple Parking Management System 1.0. ...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now