CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2022-37462

A stored Cross-Site Scripting (XSS) vulnerability in the Chat gadget in Upstream Works Agent Desktop for Cisco Finesse through 4.2.12 and 5.0 allows remote attackers to inject arbitrary web script or HTML via AttachmentId in the file-upload details.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 32.7%

CVSS Severity

CVSS v3 Score 5.4

References

https://www.campusguard.com/post/going-beyond-pen-testing-to-identify-zero-day-exploits
https://www.upstreamworks.com/support/notifications/
https://www.campusguard.com/post/going-beyond-pen-testing-to-identify-zero-day-exploits
https://www.upstreamworks.com/support/notifications/

Products affected by CVE-2022-37462

Upstreamworks » Upstream Works On Finesse » Version: 4.0

cpe:2.3:a:upstreamworks:upstream_works_on_finesse:4.0
Upstreamworks » Upstream Works On Finesse » Version: 4.2.14

cpe:2.3:a:upstreamworks:upstream_works_on_finesse:4.2.14
Upstreamworks » Upstream Works On Finesse » Version: 5.0

cpe:2.3:a:upstreamworks:upstream_works_on_finesse:5.0
Upstreamworks » Upstream Works On Finesse » Version: 5.3

cpe:2.3:a:upstreamworks:upstream_works_on_finesse:5.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-37462

Products

Pricing

Contact Us