# CVEs published 2022-11-20

8 CVEs were published on November 20, 2022: 1 critical, 1 high. Days are UTC.

- [CVE-2022-3516](https://cve.now/CVE-2022-3516.md): Cross-site Scripting (XSS) - Stored in librenms/librenms (CVSS 5.7, librenms/librenms)
- [CVE-2022-3525](https://cve.now/CVE-2022-3525.md): Deserialization of Untrusted Data in librenms/librenms (CVSS 9.0, librenms/librenms)
- [CVE-2022-3561](https://cve.now/CVE-2022-3561.md): Cross-site Scripting (XSS) - Generic in librenms/librenms (CVSS 4.3, librenms/librenms)
- [CVE-2022-3562](https://cve.now/CVE-2022-3562.md): Cross-site Scripting (XSS) - Stored in librenms/librenms (CVSS 4.3, librenms/librenms)
- [CVE-2022-4067](https://cve.now/CVE-2022-4067.md): Cross-site Scripting (XSS) - Stored in librenms/librenms (CVSS 3.4, librenms/librenms)
- [CVE-2022-4068](https://cve.now/CVE-2022-4068.md): Improperly Controlled Modification of Dynamically-Determined Object Attributes in librenms/librenms (CVSS 7.6, librenms/librenms)
- [CVE-2022-4069](https://cve.now/CVE-2022-4069.md): Cross-site Scripting (XSS) - Generic in librenms/librenms (CVSS 3.4, librenms/librenms)
- [CVE-2022-4070](https://cve.now/CVE-2022-4070.md): Insufficient Session Expiration in librenms/librenms (CVSS 2.7, librenms/librenms)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2022-11-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.