cedargate Vulnerabilities and Affected Products
Vulnerabilities associated with ez-net_portal.
Products
Clear product- ez-net_portal1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2022-23397MEDIUM | cedargate ez-net_portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')The Cedar Gate EZ-NET portal 6.5.5 6.8.0 Internet portal has a call to display messages to users which does not properly sanitize data sent in through a URL parameter. This leads to a Reflected Cross-Site Scripting vulnerability. NOTE: the vendor disputes this because the ado.im reference has "no clear steps of reproduction." | CVSS6.1v3.1 | EPSS0.89% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |