Vulnerability CVE-2022-45137


Published: 2023-02-27

Description:
The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that targets the users browser. This leads to a limited impact of confidentiality and integrity but no impact of availability.

Type:

CWE-79

(Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

 References:
https://cert.vde.com/en/advisories/VDE-2022-060/

Copyright 2026, cxsecurity.com

 

Back to Top