VulnerabilityModified
CVE-2022-2266
University Library Automation System developed by Yordam Bilgi Teknolojileri before version 19.2 has an unauthenticated Reflected XSS vulnerability.
MEDIUM 6.1EPSS 0.39%
Does this matter?
Lower severity and a low EPSS score (0.39%). Track it; it rarely justifies an emergency change on its own.
Description
University Library Automation System developed by Yordam Bilgi Teknolojileri before version 19.2 has an unauthenticated Reflected XSS vulnerability. This has been fixed in the version 19.2
- CVSS 3.1
- 6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- EPSS
- 0.39% probability · 33th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- yordam/library automation system
- Source
- iletisim@usom.gov.tr
References
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-22-0637
- https://www.usom.gov.tr/bildirim/tr-22-0637Third Party Advisory
- https://www.usom.gov.tr/bildirim/tr-22-0637Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.