Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2022-36368

Multiple stored cross-site scripting vulnerabilities in the web user interface of IPFire versions prior to 2.27 allows a remote authenticated attacker with administrative privilege to inject an arbitrary script.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 42.4%
CVSS Severity
CVSS v3 Score 4.8
Products affected by CVE-2022-36368
  • Ipfire » Ipfire » Version: 1.49
    cpe:2.3:a:ipfire:ipfire:1.49
  • Ipfire » Ipfire » Version: 2.1
    cpe:2.3:a:ipfire:ipfire:2.1
  • Ipfire » Ipfire » Version: 2.11
    cpe:2.3:a:ipfire:ipfire:2.11
  • Ipfire » Ipfire » Version: 2.13
    cpe:2.3:a:ipfire:ipfire:2.13
  • Ipfire » Ipfire » Version: 2.15
    cpe:2.3:a:ipfire:ipfire:2.15
  • Ipfire » Ipfire » Version: 2.17
    cpe:2.3:a:ipfire:ipfire:2.17
  • Ipfire » Ipfire » Version: 2.19
    cpe:2.3:a:ipfire:ipfire:2.19
  • Ipfire » Ipfire » Version: 2.21
    cpe:2.3:a:ipfire:ipfire:2.21
  • Ipfire » Ipfire » Version: 2.23
    cpe:2.3:a:ipfire:ipfire:2.23
  • Ipfire » Ipfire » Version: 2.25
    cpe:2.3:a:ipfire:ipfire:2.25
  • Ipfire » Ipfire » Version: 2.27
    cpe:2.3:a:ipfire:ipfire:2.27


Products
Pricing
Contact Us

Shodan ® - All rights reserved