by Kastro
Paper/Archive/CVE-2022-29887

CVE-2022-29887

intel — Cross-site Scripting (XSS) in some Intel(R) Manageability Commander software before version 2.3 may allow an unauthenticated user to pote…

EPSS 0.7%CVSS 9.6
critical.is priorityof 100
39
CVSS 9.6 (NVD)9.6 / 10 × 3028.8Not in CISA KEV+300.0EPSS percentile 51.5.515 × 2010.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Cross-site Scripting (XSS) in some Intel(R) Manageability Commander software before version 2.3 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

Affected

ProductAffectedFixed inSource
Intel(R) Manageability Commander softwarebefore version 2.3–CNA

Scores by source

NVD9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
intel (CNA)8.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refintel.com/content/www/us/en/security-center/advisory/intel-sa-00893.html