XSS Vulnerability in SysAid Help Desk Affects Users via Asset Dashboard
CVE-2022-40325

6.1MEDIUM

Key Information:

Vendor

Sysaid

Status
Help Desk
Vendor
CVE Published:
11 September 2022

What is CVE-2022-40325?

An XSS vulnerability was identified in SysAid Help Desk, specifically in the Asset Dashboard. This flaw allows attackers to inject malicious scripts, which can execute in the context of a victim's browser session, leading to potential data theft and unauthorized actions. It is critical to update to version 22.1.65 or later to protect against this vulnerability. For more detailed information, refer to the release notes.

References

https://documentation.sysaid.com/docs/22165-release-notes
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.