Back to Database
Status published
Unknown
CVE-2022-45338
An arbitrary file upload vulnerability in the profile picture upload...
Vulnerability Description
An arbitrary file upload vulnerability in the profile picture upload function of Exact Synergy Enterprise 267 before 267SP13 and Exact Synergy Enterprise 500 before 500SP6 allows attackers to execute arbitrary code via a crafted SVG file.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-45338
Credits & Attribution
No credits recorded in the NVD database.
Affected Vendor
exactsoftware
View all reports →Affected Software
exact synergy
Vulnerable Versions:
267, 500
Timeline
Official Publish:
December 15th, 2022
Last Modified:
April 21st, 2025
Added to House:
July 21st, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.