Vulnerability Details CVE-2022-32272
OPSWAT MetaDefender Core before 5.1.2, MetaDefender ICAP before 4.12.1, and MetaDefender Email Gateway Security before 5.6.1 have incorrect access control, resulting in privilege escalation.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.164
EPSS Ranking 94.5%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
Products affected by CVE-2022-32272
-
cpe:2.3:a:opswat:metadefender:-
-
cpe:2.3:a:opswat:metadefender:4.0.0
-
cpe:2.3:a:opswat:metadefender:4.0.1
-
cpe:2.3:a:opswat:metadefender:4.1.0
-
cpe:2.3:a:opswat:metadefender:4.10.0
-
cpe:2.3:a:opswat:metadefender:4.10.1
-
cpe:2.3:a:opswat:metadefender:4.10.2
-
cpe:2.3:a:opswat:metadefender:4.11.0
-
cpe:2.3:a:opswat:metadefender:4.11.1
-
cpe:2.3:a:opswat:metadefender:4.11.2
-
cpe:2.3:a:opswat:metadefender:4.11.3
-
cpe:2.3:a:opswat:metadefender:4.12.0
-
cpe:2.3:a:opswat:metadefender:4.12.1
-
cpe:2.3:a:opswat:metadefender:4.12.2
-
cpe:2.3:a:opswat:metadefender:4.13.0
-
cpe:2.3:a:opswat:metadefender:4.13.1
-
cpe:2.3:a:opswat:metadefender:4.13.2
-
cpe:2.3:a:opswat:metadefender:4.14.0
-
cpe:2.3:a:opswat:metadefender:4.14.1
-
cpe:2.3:a:opswat:metadefender:4.14.2
-
cpe:2.3:a:opswat:metadefender:4.14.3
-
cpe:2.3:a:opswat:metadefender:4.15.0
-
cpe:2.3:a:opswat:metadefender:4.15.1
-
cpe:2.3:a:opswat:metadefender:4.15.2
-
cpe:2.3:a:opswat:metadefender:4.16.0
-
cpe:2.3:a:opswat:metadefender:4.16.1
-
cpe:2.3:a:opswat:metadefender:4.16.2
-
cpe:2.3:a:opswat:metadefender:4.16.3
-
cpe:2.3:a:opswat:metadefender:4.17.0
-
cpe:2.3:a:opswat:metadefender:4.17.0.1
-
cpe:2.3:a:opswat:metadefender:4.17.1
-
cpe:2.3:a:opswat:metadefender:4.17.2
-
cpe:2.3:a:opswat:metadefender:4.17.3
-
cpe:2.3:a:opswat:metadefender:4.18.0
-
cpe:2.3:a:opswat:metadefender:4.19.0
-
cpe:2.3:a:opswat:metadefender:4.19.1
-
cpe:2.3:a:opswat:metadefender:4.19.2
-
cpe:2.3:a:opswat:metadefender:4.2.0
-
cpe:2.3:a:opswat:metadefender:4.20.0
-
cpe:2.3:a:opswat:metadefender:4.20.1
-
cpe:2.3:a:opswat:metadefender:4.21.0
-
cpe:2.3:a:opswat:metadefender:4.21.1
-
cpe:2.3:a:opswat:metadefender:4.21.2
-
cpe:2.3:a:opswat:metadefender:4.3.0
-
cpe:2.3:a:opswat:metadefender:4.4.1
-
cpe:2.3:a:opswat:metadefender:4.5.0
-
cpe:2.3:a:opswat:metadefender:4.5.1
-
cpe:2.3:a:opswat:metadefender:4.6.0
-
cpe:2.3:a:opswat:metadefender:4.6.2
-
cpe:2.3:a:opswat:metadefender:4.6.3
-
cpe:2.3:a:opswat:metadefender:4.7.0
-
cpe:2.3:a:opswat:metadefender:4.7.1
-
cpe:2.3:a:opswat:metadefender:4.7.2
-
cpe:2.3:a:opswat:metadefender:4.8.0
-
cpe:2.3:a:opswat:metadefender:4.8.1
-
cpe:2.3:a:opswat:metadefender:4.8.2
-
cpe:2.3:a:opswat:metadefender:4.9.0
-
cpe:2.3:a:opswat:metadefender:4.9.1
-
cpe:2.3:a:opswat:metadefender:5.0.0
-
cpe:2.3:a:opswat:metadefender:5.0.1
-
cpe:2.3:a:opswat:metadefender:5.1.0
-
cpe:2.3:a:opswat:metadefender:5.1.1