CVE Catalog

CVE-2022-23350

MediumCVSS 5.4
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.59%

44th percentile - higher than 44% of all known CVEs

Summary

A cross-site scripting (XSS) vulnerability was discovered in BigAnt Server version 5.6.06. It allows an attacker to inject malicious scripts into web pages.

Risk Assessment

The risk includes potential session hijacking, redirection to malicious sites, or other actions performed in the victim's browser context.

Recommendation

It is recommended to immediately update BigAnt Server to the latest available version that fixes this vulnerability.

Original NVD description (English source)

BigAnt Software BigAnt Server v5.6.06 was discovered to contain a cross-site scripting (XSS) vulnerability.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS