# CVEs published 2022-11-20

8 CVEs were published on November 20, 2022: 1 critical, 1 high. Days are UTC.

- [CVE-2022-3516](https://cve.now/CVE-2022-3516.md): Cross-site Scripting (XSS) - Stored in librenms/librenms (CVSS 5.7, librenms/librenms)
- [CVE-2022-3525](https://cve.now/CVE-2022-3525.md): Deserialization of Untrusted Data in librenms/librenms (CVSS 9.0, librenms/librenms)
- [CVE-2022-3561](https://cve.now/CVE-2022-3561.md): Cross-site Scripting (XSS) - Generic in librenms/librenms (CVSS 4.3, librenms/librenms)
- [CVE-2022-3562](https://cve.now/CVE-2022-3562.md): Cross-site Scripting (XSS) - Stored in librenms/librenms (CVSS 4.3, librenms/librenms)
- [CVE-2022-4067](https://cve.now/CVE-2022-4067.md): Cross-site Scripting (XSS) - Stored in librenms/librenms (CVSS 3.4, librenms/librenms)
- [CVE-2022-4068](https://cve.now/CVE-2022-4068.md): Improperly Controlled Modification of Dynamically-Determined Object Attributes in librenms/librenms (CVSS 7.6, librenms/librenms)
- [CVE-2022-4069](https://cve.now/CVE-2022-4069.md): Cross-site Scripting (XSS) - Generic in librenms/librenms (CVSS 3.4, librenms/librenms)
- [CVE-2022-4070](https://cve.now/CVE-2022-4070.md): Insufficient Session Expiration in librenms/librenms (CVSS 2.7, librenms/librenms)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-11-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.