CVE-2022-22450
CVE-2022-22450
Vexday Risk Score
8Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 3.8EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
14 Jul 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
IBM Security Verify Identity Manager 10.0 could allow a privileged user to upload a malicious file by bypassing extension security in an HTTP request. IBM X-Force ID: 224916.
CVSS:3.0/S:U/A:N/C:L/UI:N/AV:N/PR:H/I:L/AC:L/RC:C/RL:O/E:U
Affected products
IBM · Security Verify Governance