← Database

CVE-2022-38162

MEDIUM CVSS: 6.1 Published: 2022-10-25 Modified: 2026-06-17

Description

Reflected cross-site scripting (XSS) vulnerabilities in WithSecure through 2022-08-10) exists within the F-Secure Policy Manager due to an unvalidated parameter in the endpoint, which allows remote attackers to provide a malicious input.

Affected Platforms

Withsecure F-Secure Policy Manager

Weakness Type

CWE-79, CWE-79

References