Vulnerability Details CVE-2022-36157
XXL-JOB all versions as of 11 July 2022 are vulnerable to Insecure Permissions resulting in the ability to execute admin function with low Privilege account.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.09
EPSS Ranking 92.2%
CVSS Severity
CVSS v3 Score 8.8
References
Products affected by CVE-2022-36157
-
cpe:2.3:a:xuxueli:xxl-job:1.0.0.0
-
cpe:2.3:a:xuxueli:xxl-job:1.2.0
-
cpe:2.3:a:xuxueli:xxl-job:1.3.0
-
cpe:2.3:a:xuxueli:xxl-job:1.3.1
-
cpe:2.3:a:xuxueli:xxl-job:1.3.2
-
cpe:2.3:a:xuxueli:xxl-job:1.4.0
-
cpe:2.3:a:xuxueli:xxl-job:1.4.2
-
cpe:2.3:a:xuxueli:xxl-job:1.5.0
-
cpe:2.3:a:xuxueli:xxl-job:1.5.1
-
cpe:2.3:a:xuxueli:xxl-job:1.5.2
-
cpe:2.3:a:xuxueli:xxl-job:1.6.0
-
cpe:2.3:a:xuxueli:xxl-job:1.6.2
-
cpe:2.3:a:xuxueli:xxl-job:1.7.0
-
cpe:2.3:a:xuxueli:xxl-job:1.7.1
-
cpe:2.3:a:xuxueli:xxl-job:1.7.2
-
cpe:2.3:a:xuxueli:xxl-job:1.8.0
-
cpe:2.3:a:xuxueli:xxl-job:1.8.1
-
cpe:2.3:a:xuxueli:xxl-job:1.8.2
-
cpe:2.3:a:xuxueli:xxl-job:1.9.0
-
cpe:2.3:a:xuxueli:xxl-job:1.9.1
-
cpe:2.3:a:xuxueli:xxl-job:1.9.2
-
cpe:2.3:a:xuxueli:xxl-job:2.0.0
-
cpe:2.3:a:xuxueli:xxl-job:2.0.1
-
cpe:2.3:a:xuxueli:xxl-job:2.0.2
-
cpe:2.3:a:xuxueli:xxl-job:2.1.0
-
cpe:2.3:a:xuxueli:xxl-job:2.1.1
-
cpe:2.3:a:xuxueli:xxl-job:2.1.2
-
cpe:2.3:a:xuxueli:xxl-job:2.2.0
-
cpe:2.3:a:xuxueli:xxl-job:2.3.0
-
cpe:2.3:a:xuxueli:xxl-job:2.3.1