← back
CVE-2022-38385

CVE-2022-38385

CVSS 7.1 HIGHEPSS 0.5%CWE-20
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7.1EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
11 Nov 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.2.0 could allow an authenticated user to obtain highly sensitive information or perform unauthorized actions due to improper input validation. IBM X-Force ID: 233777.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Affected products
IBM · Cloud Pak for Security
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/233777https://www.ibm.com/support/pages/node/6833586