Back to Database
Status published
Unknown
CVE-2022-40711
PrimeKey EJBCA 7.9.0.2 Community allows stored XSS in the End...
Vulnerability Description
PrimeKey EJBCA 7.9.0.2 Community allows stored XSS in the End Entity section. A user with the RA Administrator role can inject an XSS payload to target higher-privilege users.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-40711
Credits & Attribution
No credits recorded in the NVD database.
References
More from primekey
View All →CVE-2022-34831
An issue was discovered in Keyfactor PrimeKey EJBCA before 7.9.0,...
Critical
9.8
CVE-2022-26494
An XSS was identified in the Admin Web interface of...
Medium
4.8
CVE-2021-40089
An issue was discovered in PrimeKey EJBCA before 7.6.0. The...
Low
2.3
CVE-2021-40088
An issue was discovered in PrimeKey EJBCA before 7.6.0. CMP...
Medium
5.4
CVE-2021-40087
An issue was discovered in PrimeKey EJBCA before 7.6.0. When...
Low
2.7
Affected Vendor
primekey
View all reports →Affected Software
ejbca
Vulnerable Versions:
7.9.0.2
Timeline
Official Publish:
January 1st, 2023
Last Modified:
April 11th, 2025
Added to House:
July 21st, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.