CVE-2022-4559

Low

Description

A vulnerability was found in INEX IPX-Manager up to 6.2.0. It has been declared as problematic. This vulnerability affects unknown code of the file resources/views/customer/list.foil.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 6.3.0 is able to address this issue. The name of the patch is bc9b14c6f70cccdb89b559e8bc3a7318bfe9c243. It is recommended to upgrade the affected component. VDB-215962 is the identifier assigned to this vulnerability.

SeverityLow
CVSS3.5
Exploit probability—
ProductInex Ixp Manager
PublishedDec 16, 2022
First seenDec 16, 2022
Weakness typeCWE-707CWE-707

How to fix

Update
  • inex ixp_manager6.3.0 or later

Affected products

ProductAffected versionsFixed in
inex ixp_managerv < 6.3.06.3.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.