Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2022-22682

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Event Management in Synology Calendar before 2.4.5-10930 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 16.3%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 3.5
Products affected by CVE-2022-22682
  • Synology » Calendar » Version: 1.0.0-0121
    cpe:2.3:a:synology:calendar:1.0.0-0121
  • Synology » Calendar » Version: 1.0.2-0131
    cpe:2.3:a:synology:calendar:1.0.2-0131
  • Synology » Calendar » Version: 1.0.3-0132
    cpe:2.3:a:synology:calendar:1.0.3-0132
  • Synology » Calendar » Version: 1.1.0-0146
    cpe:2.3:a:synology:calendar:1.1.0-0146
  • Synology » Calendar » Version: 2.0.0-0241
    cpe:2.3:a:synology:calendar:2.0.0-0241
  • Synology » Calendar » Version: 2.0.1-0242
    cpe:2.3:a:synology:calendar:2.0.1-0242
  • Synology » Calendar » Version: 2.1.0-0425
    cpe:2.3:a:synology:calendar:2.1.0-0425
  • Synology » Calendar » Version: 2.1.1-0502
    cpe:2.3:a:synology:calendar:2.1.1-0502
  • Synology » Calendar » Version: 2.1.2-0511
    cpe:2.3:a:synology:calendar:2.1.2-0511
  • Synology » Calendar » Version: 2.2.1-0518
    cpe:2.3:a:synology:calendar:2.2.1-0518
  • Synology » Calendar » Version: 2.2.2-0532
    cpe:2.3:a:synology:calendar:2.2.2-0532
  • Synology » Calendar » Version: 2.2.3-0534
    cpe:2.3:a:synology:calendar:2.2.3-0534
  • Synology » Calendar » Version: 2.3.0-0615
    cpe:2.3:a:synology:calendar:2.3.0-0615
  • Synology » Calendar » Version: 2.3.1-0617
    cpe:2.3:a:synology:calendar:2.3.1-0617
  • Synology » Calendar » Version: 2.3.2-0619
    cpe:2.3:a:synology:calendar:2.3.2-0619
  • Synology » Calendar » Version: 2.3.3-0620
    cpe:2.3:a:synology:calendar:2.3.3-0620


Products
Pricing
Contact Us

Shodan ® - All rights reserved