Skip to content
Sign in
Not rated

CVE-2022-38358 Improper neutralization of input during web page generation leaves the Eyes of Network web application vulnerable to…

Description

Improper neutralization of input during web page generation leaves the Eyes of Network web application vulnerable to cross-site scripting attacks at /module/admin_notifiers/rules.php and /module/report_event/indext.php via the parameters rule_notification, rule_name, and rule_name_old, and at /module/admin_user/add_modify_user.php via the parameters user_name and user_email.

Affected products and versions

Product Affected versions Fixed in
Eyes of Network 5.3 No fix stated

Other CVEs of Eyes of Network

The 2 CVEs of Eyes of Network →
CVE-2022-38359 Cross-site request forgery attacks can be carried out against the Eyes of Network web application, due to an absence… Not rated
Track this CVE