CVE-2022-25784
Published May 4, 2022
Last updated 3 years ago
Overview
- Description
- Cross-site Scripting (XSS) vulnerability in Web GUI of SiteManager allows logged-in user to inject scripting. This issue affects: Secomea SiteManager all versions prior to 9.7.
- Source
- VulnerabilityReporting@secomea.com
- NVD status
- Analyzed
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 4.8
- Impact score
- 2.7
- Exploitability score
- 1.7
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
- Severity
- MEDIUM
CVSS 2.0
- Type
- Primary
- Base score
- 3.5
- Impact score
- 2.9
- Exploitability score
- 6.8
- Vector string
- AV:N/AC:M/Au:S/C:N/I:P/A:N
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:secomea:sitemanager_1129_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7129D184-BF8A-4458-BE20-14DB478B8306",
"versionEndExcluding": "9.7.622134021"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:secomea:sitemanager_1129:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "29BFC1D6-82B6-4E20-BBFB-63F33373D78B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:secomea:sitemanager_1139_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1FB6241F-5E35-4635-87CA-69F9394E0969",
"versionEndExcluding": "9.7.622134021"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:secomea:sitemanager_1139:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "856E0FE1-D1FD-47A3-8DE0-A12F6FBD60E8"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:secomea:sitemanager_1149_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "080C47BD-BF42-43DE-8C89-3A289CC3DF96",
"versionEndExcluding": "9.7.622134021"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:secomea:sitemanager_1149:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "060DA5EF-B6FE-4E02-B0A5-EAAF5CF5AC35"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:secomea:sitemanager_3329_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5C657B3D-BEE4-4341-94F3-AC079FB2D0E4",
"versionEndExcluding": "9.7.622134021"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:secomea:sitemanager_3329:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6ABE08F2-C6D0-4CA3-99F4-0654653E7BF3"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:secomea:sitemanager_3339_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F45C7EB4-AE1A-42C1-8395-4C3FAC4F4DAF",
"versionEndExcluding": "9.7.622134021"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:secomea:sitemanager_3339:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FF64F7DA-FD12-4231-B792-EF8F79B587CF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:secomea:sitemanager_3349_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A875ACB6-F2BE-4513-9ECD-FDD0FC816618",
"versionEndExcluding": "9.7.622134021"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:secomea:sitemanager_3349:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8C7D7926-A5F5-46A1-A6B7-3C99130FA609"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:secomea:sitemanager_3529_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6C00A040-6825-4F46-A0D6-DBBBD1CBF9F3",
"versionEndExcluding": "9.7.622134021"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:secomea:sitemanager_3529:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5C5F7D37-729C-4969-9661-C933C9F16980"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:secomea:sitemanager_3539_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F5B66D1E-202F-4C95-A3C0-5D705717C3EA",
"versionEndExcluding": "9.7.622134021"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:secomea:sitemanager_3539:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1D26BFEA-056C-4760-8D10-A0DF3677DAD1"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:secomea:sitemanager_3549_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1A2151C3-0AB1-4255-BCC9-EDD95E85C627",
"versionEndExcluding": "9.7.622134021"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:secomea:sitemanager_3549:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A05A3825-9C8E-43EF-A2DC-F0B06694CCCD"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]