CVE-2022-39834

Description

A stored XSS vulnerability was discovered in adminweb/ra/viewendentity.jsp in PrimeKey EJBCA through 7.9.0.2. A low-privilege user can store JavaScript in order to exploit a higher-privilege user.

Related CPE's

akeyfactorprimekey_ejbca********

References

https://support.keyfactor.com/s/detail/a6x1Q000000CwCoQAK

Vendor Advisory

CvssV3 impact

Could not find any metrics

CvssV2 impact

Could not find any metrics
Created by Yello
About Severity.io