AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2022-21145

MEDIUM · CVSS 4.8 EPSS 77.78%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-04-14 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 4.8. It affects Java. Its EPSS score suggests a 77.8% probability of exploitation in the next 30 days.

CVE
CVE-2022-21145
Severity
MEDIUM
CVSS
4.8
EPSS
77.78%
Java

Original NVD Description

A stored cross-site scripting vulnerability exists in the WebUserActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger this vulnerability.

Related CVEs

Other vulnerabilities affecting the same vendor(s)