CVE-2022-26978

MEDIUM · CVSS 6.1 EPSS 0.54%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-06-02 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-26978

Severity

MEDIUM

CVSS

6.1

EPSS

0.54%

Original NVD Description

Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /checklogin.jsp endpoint. The os_username parameters is not correctly sanitized, leading to reflected XSS.