CVE-2022-27176
High
Description
Incomplete filtering of special elements vulnerability exists in RevoWorks SCVX using 'File Sanitization Library' 1.043 and prior versions, RevoWorks Browser 2.2.67 and prior versions (when using 'File Sanitization Option'), and RevoWorks Desktop 2.1.84 and prior versions (when using 'File Sanitization Option'), which may allow an attacker to execute a malicious macro by having a user to download, import, and open a specially crafted file in the local environment.
SeverityHigh
CVSS7.8
Exploit probability—
ProductJscom Revoworks Browser
PublishedJun 14, 2022
First seenJun 14, 2022
How to fix
Update
- jscom revoworks_browser2.2.69 or later
- jscom revoworks_desktop2.1.85 or later
- jscom revoworks_scvx1.0.44 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jscom revoworks_browser | v < 2.2.69 | 2.2.69 |
| jscom revoworks_desktop | v < 2.1.85 | 2.1.85 |
| jscom revoworks_scvx | v < 1.0.44 | 1.0.44 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.