← Database

CVE-2022-39834

MEDIUM CVSS: 5.4 Published: 2022-11-17 Modified: 2026-06-17

Description

A stored XSS vulnerability was discovered in adminweb/ra/viewendentity.jsp in PrimeKey EJBCA through 7.9.0.2. A low-privilege user can store JavaScript in order to exploit a higher-privilege user.

Affected Platforms

Keyfactor Primekey Ejbca

Weakness Type

CWE-79

References