Vulnerability · Published Oct 19, 2022 · Assigned by redhat
CVE-2022-1414
High 8.8
In plain English
A high-severity security flaw in 3scale-amp-system. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 61% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.9%top 39.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
3scale API Management 2 does not perform adequate sanitation for user input in multiple fields. An authenticated user could use this flaw to inject scripts and possibly gain access to sensitive information or conduct further attacks.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | 3scale-amp-system | 3scale-amp-system as shipped in 3scale-AMP 2 |
Weakness: CWE-1173 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H