CVE-2022-37462
CVSS V2 None
CVSS V3 None
Description
A stored Cross-Site Scripting (XSS) vulnerability in the Chat gadget in Upstream Works Agent Desktop for Cisco Finesse through 4.2.12 and 5.0 allows remote attackers to inject arbitrary web script or HTML via AttachmentId in the file-upload details.
Overview
- CVE ID
- CVE-2022-37462
- Assigner
- cve@mitre.org
- Vulnerability Status
- Analyzed
- Published Version
- 2023-04-10T13:15:06
- Last Modified Date
- 2023-04-25T13:12:59
Weakness Enumerations
CPE Configuration (Product)
CPE | Vulnerable | Operator | Version Start | Version End |
---|---|---|---|---|
cpe:2.3:a:upstreamworks:upstream_works_on_finesse:*:*:*:*:*:*:*:* | 1 | OR | 4.0 | 4.2.14 |
cpe:2.3:a:upstreamworks:upstream_works_on_finesse:*:*:*:*:*:*:*:* | 1 | OR | 5.0 | 5.3 |
References
Sources
Source Name | Source URL |
---|---|
NIST | https://nvd.nist.gov/vuln/detail/CVE-2022-37462 |
MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37462 |
History
Created | Old Value | New Value | Data Type | Notes |
---|---|---|---|---|
2023-04-17 04:25:36 | Added to TrackCVE | |||
2023-04-17 15:00:37 | Awaiting Analysis | Undergoing Analysis | Vulnerability Status | updated |
2023-04-25 14:00:48 | 2023-04-25T13:12:59 | CVE Modified Date | updated | |
2023-04-25 14:00:48 | Undergoing Analysis | Analyzed | Vulnerability Status | updated |
2023-04-25 14:00:49 | Weakness Enumeration | new | ||
2023-04-25 14:00:50 | CPE Information | updated |