Back to Database
Status published
Unknown
CVE-2022-37028
ISAMS 22.2.3.2 is prone to stored Cross-site Scripting (XSS) attack...
Vulnerability Description
ISAMS 22.2.3.2 is prone to stored Cross-site Scripting (XSS) attack on the title field for groups, allowing an attacker to store a JavaScript payload that will be executed when another user uses the application.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-37028
Credits & Attribution
No credits recorded in the NVD database.
References
More from iris
View All →CVE-2020-28406
An improper authorization vulnerability exists in Star Practice Management Web...
Medium
6.5
CVE-2020-28405
An improper authorization vulnerability exists in Star Practice Management Web...
High
8.8
CVE-2020-28404
An improper authorization vulnerability exists in Star Practice Management Web...
Medium
6.5
CVE-2020-28403
A Cross-Site Request Forgery (CSRF) vulnerability exists in Star Practice...
High
8
CVE-2020-28402
An improper authorization vulnerability exists in Star Practice Management Web...
Medium
5.4
Affected Vendor
iris
View all reports →Affected Software
isams
Vulnerable Versions:
22.2.3.2
Timeline
Official Publish:
September 27th, 2022
Last Modified:
May 30th, 2025
Added to House:
July 21st, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.