VulnerabilityModified
CVE-2022-4554
B2B Customer Ordering System developed by ID Software Project and Consultancy Services before version 1.0.0.347 has an authenticated Reflected XSS vulnerability.
MEDIUM 5.4EPSS 0.34%
Does this matter?
Lower severity and a low EPSS score (0.34%). Track it; it rarely justifies an emergency change on its own.
Description
B2B Customer Ordering System developed by ID Software Project and Consultancy Services before version 1.0.0.347 has an authenticated Reflected XSS vulnerability. This has been fixed in the version 1.0.0.347.
- CVSS 3.1
- 5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
- EPSS
- 0.34% probability · 27th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- idyazilim/b2b dealer order system
- Source
- iletisim@usom.gov.tr
References
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0022
- https://www.usom.gov.tr/bildirim/tr-23-0022Third Party Advisory
- https://www.usom.gov.tr/bildirim/tr-23-0022Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.