CVEs published July 8, 2022
25 CVEs were published on July 8, 2022: 2 critical, 3 high.
- Published
- 25
- Critical
- 2
- High
- 3
- Medium
- 9
- Low
- 0
- Unrated
- 11
- Now in CISA KEV
- 0
- Fix available
- 6
Most affected products
- IBM Security Verify Access
- 4
- idno/known
- 4
- IBM CICS TX Advanced · IBM CICS TX Standard
- 3
- vim/vim
- 3
- hap-wi roxy-wi
- 1
- HPE FlexNetwork 5130 EI Switch Series; HPE FlexFabric 5945…
- 1
- HPE IceWall SSO
- 1
- IBM CICS TX Standard · IBM CICS TX Advanced
- 1
- IBM WebSphere Application Server Liberty
- 1
- mat2
- 1
Critical 2
High 3
Medium, low and unrated 20
- CVE-2022-35412Digital Guardian Agent 7.7.4.0042 allows an administrator (who ordinarily does not have a supported way to uninstall the product) to disable
- CVE-2022-34914Webswing before 22.1.3 allows X-Forwarded-For header injection.
- CVE-2022-35411rpc.py through 0.6.0 allows Remote Code Execution because an unpickle occurs when the "serializer: pickle" HTTP header is sent.rpc-py
- CVE-2022-22476IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.7 and Open Liberty are vulnerable to identity spoofing by an authenticated IBM WebSphere Application Server Liberty
- CVE-2022-22465IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 could allow a local user to obtain elevated privileges due IBM Security Verify Access
- CVE-2022-22464IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 uses weaker than expected cryptographic algorithms that couIBM Security Verify Access
- CVE-2022-22463IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 is vulnerable to SQL injection.IBM Security Verify Access
- CVE-2022-22370IBM Security Verify Access 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 is vulnerable to cross-site scripting.IBM Security Verify Access
- CVE-2022-35410mat2 (aka metadata anonymisation toolkit) before 0.13.0 allows ../ directory traversal during the ZIP archive cleaning process.mat2
- CVE-2022-34306IBM CICS TX Standard and Advanced 11.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers.IBM CICS TX Advanced · IBM CICS TX Standard
- CVE-2022-34167IBM CICS TX Standard and Advanced 11.1 is vulnerable to stored cross-site scripting.IBM CICS TX Standard · IBM CICS TX Advanced
- CVE-2022-34166IBM CICS TX Standard and Advanced 11.1 is vulnerable to cross-site scripting.IBM CICS TX Advanced · IBM CICS TX Standard
- CVE-2022-34160IBM CICS TX Standard and Advanced 11.1 is vulnerable to HTML injection.IBM CICS TX Advanced · IBM CICS TX Standard
- CVE-2022-35406A URL disclosure issue was discovered in Burp Suite before 2022.6.
- CVE-2022-28623Security vulnerabilities in HPE IceWall SSO 10.0 certd could be exploited remotely to allow SQL injection or unauthorized data injection.HPE IceWall SSO
- CVE-2022-28624A potential security vulnerability has been identified in certain HPE FlexNetwork and FlexFabric switch products.HPE FlexNetwork 5130 EI Switch Series; HPE FlexFabric 5945…
- CVE-2022-33011Known v1.3.1+2020120201 was discovered to allow attackers to perform an account takeover via a host header injection attack.idno/known
- CVE-2022-32115An issue in the isSVG() function of Known v1.2.2+2020061101 allows attackers to execute arbitrary code via a crafted SVG file.idno/known
- CVE-2022-31290A cross-site scripting (XSS) vulnerability in Known v1.2.2+2020061101 allows authenticated attackers to execute arbitrary web scripts or HTMidno/known
- CVE-2022-30852Known v1.3.1 was discovered to contain an Insecure Direct Object Reference (IDOR).idno/known