CVE-2022-36783 - CVE House
Back to Database
Status published Medium CVE-2022-36783

AlgoSec – FireFlow Reflected Cross-Site-Scripting (RXSS)

Vulnerability Description

AlgoSec – FireFlow Reflected Cross-Site-Scripting (RXSS) A malicious user injects JavaScript code into a parameter called IntersectudRule on the search/result.html page. The malicious user changes the request from POST to GET and sends the URL to another user (victim). JavaScript code is executed on the browser of the other user.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-36783

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Dean Aviani - Hacktics EY

References

More from AlgoSec

View All →
CVE-2025-12382
Path Traversal Allows Remote Code Execution in AlgoSec Firewall Analyzer
High 7.3
CVE-2025-12381
Privilege Escalation via Misconfigured Sudoers Entry for Local Users in AlgoSec Firewall Analyzer
Medium 6.1

Affected Vendor

Affected Software

FireFlow A32.0, FireFlow A32.10, FireFlow A32.20
Vulnerable Versions:
A32.0.580-277, A32.10.410-212, A32.20.230-35

Timeline

Official Publish: October 25th, 2022
Last Modified: May 7th, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.