← back
CVE-2022-3826

Huaxia ERP Retail Management list information disclosure

CVSS 4.3 MEDIUMEPSS 0.6%CWE-266
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 4.3EPSS 0.6%KEV nãoPoC Nuclei Metasploit Patch
Lifecycle
02 Nov 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A vulnerability was found in Huaxia ERP. It has been classified as problematic. This affects an unknown part of the file /depotHead/list of the component Retail Management. The manipulation of the argument search leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-212793 was assigned to this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected products
Huaxia · ERP

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →