CVE-2022-43712 - CVE House
Back to Database
Status published Medium CVE-2022-43712

POST requests to /web/mvc in GX Software XperienCentral version 10.36.0...

Vulnerability Description

POST requests to /web/mvc in GX Software XperienCentral version 10.36.0 and earlier were not blocked for uses that are not logged in. If an unauthorized user is able to bypass other security filters they are able to post unauthorized data to the server because of CVE-2022-22965.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-43712

Credits & Attribution

No credits recorded in the NVD database.

References

More from gxsoftware

View All →
CVE-2022-43713
Interactive Forms (IAF) in GX Software XperienCentral versions 10.33.1 until...
High 7.5
CVE-2022-43711
Interactive Forms (IAF) in GX Software XperienCentral versions 10.29.1 until...
Medium 6.1
CVE-2022-43710
Interactive Forms (IAF) in GX Software XperienCentral versions 10.31.0 until...
High 8.8

Affected Vendor

Affected Software

xperiencentral
Vulnerable Versions:
0

Timeline

Official Publish: July 26th, 2023
Last Modified: October 23rd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.