CVE-2022-3442

LOW

Crealogix EBICS 7.0 - Cross-Site Scripting in /ebics-server/ebics.aspx

Title source: llm
STIX 2.1

Description

A vulnerability was found in Crealogix EBICS 7.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /ebics-server/ebics.aspx. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 7.1 is able to address this issue. It is recommended to upgrade the affected component. VDB-210374 is the identifier assigned to this vulnerability.

References (2)

Core 2
Core References
Permissions Required, Third Party Advisory
https://vuldb.com/?id.210374

Scores

CVSS v3 3.5
EPSS 0.0046
EPSS Percentile 36.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-79 CWE-707
Status published
Products (1)
crealogix/ebics_server 7.0
Published Oct 10, 2022
Tracked Since Feb 18, 2026