Cross-Site Scripting Vulnerability in Intel EMA Software
CVE-2022-30297

7.8HIGH

Key Information:

Vendor

Intel
Status
Intel(r) Ema Software
Vendor
CVE Published:
11 November 2022

What is CVE-2022-30297?

A cross-site scripting vulnerability exists in Intel EMA software prior to version 1.8.0 that could allow a privileged user to enable potential privilege escalation through local access. This vulnerability can expose the system to further attacks if exploited, jeopardizing user data and system integrity.

Affected Version(s)

Intel(R) EMA software before version 1.8.0

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.