Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2022-23054

Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Summary Widget” element, that allows the injection of malicious JavaScript into the ‘URL’ field. This issue affects: nasa openmct 1.7.7 version and prior versions; 1.3.0 version and later versions.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 45.7%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
Products affected by CVE-2022-23054
  • Nasa » Openmct » Version: 1.3.0
    cpe:2.3:a:nasa:openmct:1.3.0
  • Nasa » Openmct » Version: 1.3.1
    cpe:2.3:a:nasa:openmct:1.3.1
  • Nasa » Openmct » Version: 1.3.2
    cpe:2.3:a:nasa:openmct:1.3.2
  • Nasa » Openmct » Version: 1.4.0
    cpe:2.3:a:nasa:openmct:1.4.0
  • Nasa » Openmct » Version: 1.4.1
    cpe:2.3:a:nasa:openmct:1.4.1
  • Nasa » Openmct » Version: 1.4.2
    cpe:2.3:a:nasa:openmct:1.4.2
  • Nasa » Openmct » Version: 1.6.0
    cpe:2.3:a:nasa:openmct:1.6.0
  • Nasa » Openmct » Version: 1.6.1
    cpe:2.3:a:nasa:openmct:1.6.1
  • Nasa » Openmct » Version: 1.6.2
    cpe:2.3:a:nasa:openmct:1.6.2
  • Nasa » Openmct » Version: 1.7.0
    cpe:2.3:a:nasa:openmct:1.7.0
  • Nasa » Openmct » Version: 1.7.1
    cpe:2.3:a:nasa:openmct:1.7.1
  • Nasa » Openmct » Version: 1.7.2
    cpe:2.3:a:nasa:openmct:1.7.2
  • Nasa » Openmct » Version: 1.7.3
    cpe:2.3:a:nasa:openmct:1.7.3
  • Nasa » Openmct » Version: 1.7.4
    cpe:2.3:a:nasa:openmct:1.7.4
  • Nasa » Openmct » Version: 1.7.7
    cpe:2.3:a:nasa:openmct:1.7.7


Products
Pricing
Contact Us

Shodan ® - All rights reserved