CVE-2022-4554
CVSS V2 None
CVSS V3 None
Description
B2B Customer Ordering System developed by ID Software Project and Consultancy Services before version 1.0.0.347 has an authenticated Reflected XSS vulnerability. This has been fixed in the version 1.0.0.347.
Overview
- CVE ID
- CVE-2022-4554
- Assigner
- cve@usom.gov.tr
- Vulnerability Status
- Modified
- Published Version
- 2023-01-24T09:15:09
- Last Modified Date
- 2023-04-17T08:15:07
Weakness Enumerations
CPE Configuration (Product)
| CPE | Vulnerable | Operator | Version Start | Version End |
|---|---|---|---|---|
| cpe:2.3:a:idyazilim:b2b_dealer_order_system:*:*:*:*:*:*:*:* | 1 | OR | 1.0.0.347 |
References
| Reference URL | Reference Tags |
|---|---|
| https://www.usom.gov.tr/bildirim/tr-23-0022 |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2022-4554 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4554 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2023-01-24 11:14:22 | Added to TrackCVE | |||
| 2023-01-24 11:14:23 | Weakness Enumeration | new | ||
| 2023-01-24 16:14:42 | 2023-01-24T14:40:52 | CVE Modified Date | updated | |
| 2023-01-24 16:14:42 | Received | Awaiting Analysis | Vulnerability Status | updated |
| 2023-01-31 14:13:41 | Awaiting Analysis | Undergoing Analysis | Vulnerability Status | updated |
| 2023-01-31 17:14:28 | 2023-01-31T15:57:52 | CVE Modified Date | updated | |
| 2023-01-31 17:14:28 | Undergoing Analysis | Analyzed | Vulnerability Status | updated |
| 2023-01-31 17:14:31 | CPE Information | updated | ||
| 2023-04-16 11:13:47 | 2023-04-16T09:15:08 | CVE Modified Date | updated | |
| 2023-04-16 11:13:47 | Analyzed | Modified | Vulnerability Status | updated |
| 2023-04-16 11:13:49 | B2B Customer Ordering System developed by ID Software Project and Consultancy Services before version 1.0.0.347 has an authenticated Reflected XSS vulnerability. This has been fixed in the version 1.0.0.347. | B2B Customer Ordering System developed by ID Software Project and Consultancy Services before version 1.0.0.347 has an authenticated Reflected XSS vulnerability. This has been fixed in the version 1.0.0.347. | Description | updated |
| 2023-04-17 10:02:06 | 2023-04-17T08:15:07 | CVE Modified Date | updated |