CVE-2022-47877
MEDIUM 5.4EPSS 2.6%
A Stored cross-site scripting vulnerability in Jedox 2020.2.5 allows remote, authenticated users to inject arbitrary web script or HTML in the Logs page via the log module 'log'.
- CVSS v3.1 NVD
- 5.4 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N - CVSS v3.1 CNA
- 9.6 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N - EPSS
- 2.63% chance of exploitation in the next 30 days, 85th percentile
- Published
- 2023-05-02
- Updated
- 2025-01-30