CVE Feed

    Dashboard / CVE / CVE-2022-39813

    CVE-2022-39813

    Italtel NetMatch-S CI 5.2.0-20211008 allows Multiple Reflected/Stored XSS issues under NMSCIWebGui/j_security_check via the j_username parameter, or NMSCIWebGui/actloglineview.jsp via the name or actLine parameter. An attacker leveraging this vulnerability could inject arbitrary JavaScript. The payload would then be triggered every time an authenticated user browses the page containing it.

    Published:Jan 27, 2023
    Last Modified:Mar 28, 2025
    EPS:Jan 27, 2023
    EPSS Score:0.00139
    CVSS Score:6.1

    Affected Products

    Vendor
    Italtel
    Product
    Netmatch-s Ci

    Exploits

    https://www.gruppotim.it/it/footer/red-team.htmlhttps://www.gruppotim.it/it/footer/red-team.html

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High