← Database

CVE-2022-40711

MEDIUM CVSS: 4.8 Published: 2023-01-01 Modified: 2026-06-17

Description

PrimeKey EJBCA 7.9.0.2 Community allows stored XSS in the End Entity section. A user with the RA Administrator role can inject an XSS payload to target higher-privilege users.

Affected Platforms

Primekey Ejbca

Weakness Type

CWE-79, CWE-79

References