CVE-2022-39035

MEDIUM · CVSS 6.1 EPSS 0.53%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-09-28 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-39035

Severity

MEDIUM

CVSS

6.1

EPSS

0.53%

Java

Original NVD Description

Smart eVision has insufficient filtering for special characters in the POST Data parameter in the specific function. An unauthenticated remote attacker can inject JavaScript to perform XSS (Stored Cross-Site Scripting) attack.