CVE-2022-42989

CriticalCVSS 9.0

Published: 22/11/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.84%

53th percentile - higher than 53% of all known CVEs

Summary

ERP Sankhya before version v4.11b81 was found to contain a cross-site scripting (XSS) vulnerability in the Caixa de Entrada component. This allows an attacker to inject malicious JavaScript code into the page.

Risk Assessment

The risk involves potential theft of user sessions, data interception, or unauthorized actions performed in the context of the victim.

Recommendation

It is recommended to immediately upgrade ERP Sankhya to version v4.11b81 or later, which includes a fix for this vulnerability.

Original NVD description (English source)

ERP Sankhya before v4.11b81 was discovered to contain a cross-site scripting (XSS) vulnerability via the component Caixa de Entrada.