CVE-2022-27237 - CVE House
Back to Database
Status published Medium CVE-2022-27237

There is a cross-site scripting (XSS) vulnerability in an NI...

Vulnerability Description

There is a cross-site scripting (XSS) vulnerability in an NI Web Server component installed with several NI products. Depending on the product(s) in use, remediation guidance includes: install SystemLink version 2021 R3 or later, install FlexLogger 2022 Q2 or later, install LabVIEW 2021 SP1, install G Web Development 2022 R1 or later, or install Static Test Software Suite version 1.2 or later.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-27237

Credits & Attribution

No credits recorded in the NVD database.

References

More from ni

View All →
CVE-2022-42718
Incorrect default permissions in the installation folder for NI LabVIEW...
Unknown 0
CVE-2022-35415
An improper input validation in NI System Configuration Manager before...
High 7.8
CVE-2021-42563
There is an Unquoted Service Path in NI Service Locator...
High 7.8
CVE-2021-38304
Improper input validation in the National Instruments NI-PAL driver in...
High 7.8
CVE-2013-5026
An ActiveX control in lookout650.ocx, lookout660.ocx, and lookout670.ocx in National...
Critical 9.3

Affected Vendor

Affected Software

flexlogger, g web development software, labview, static test software suite, systemlink
Vulnerable Versions:
2021, 0, 2020, 2022

Timeline

Official Publish: April 21st, 2022
Last Modified: August 3rd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.