Vulnerability · Published Jul 8, 2022 · Assigned by hpe
CVE-2022-28623
Critical 9.8
In plain English
A critical-severity security flaw in HPE IceWall SSO. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 60% of all known vulnerabilities).
Severity (CVSS NVD)9.8Critical
Exploit odds (30 days)0.9%top 39.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Security vulnerabilities in HPE IceWall SSO 10.0 certd could be exploited remotely to allow SQL injection or unauthorized data injection. HPE has provided the following updated modules to resolve these vulnerabilities. HPE IceWall SSO version 10.0 certd library Patch 9 for RHEL and HPE IceWall SSO version 10.0 certd library Patch 9 for HP-UX.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | HPE IceWall SSO | Prior to HPE IceWall SSO certd 10.0 (RHEL and HP-UX) |