CVE-2022-1524High 7.43.2.5 CLEARTEXT TRANSMISSION OF SENSITIVE INFORMATION CWE-3190.3%
CVE-2022-1518Critical 10.03.2.2 IMPROPER LIMITATION OF A PATHNAME TO A RESTRICTED DIRECTORY ('PATH TRAVERSAL') CWE-221.7%
CVE-2022-1519Critical 10.0LRM does not restrict the types of files that can be uploaded to the affected product. A malicious actor can upload any file type, including executable code that allows for a remote code exploit.1.4%
CVE-2022-1517Critical 10.03.2.1 EXECUTION WITH UNNECESSARY PRIVILEGES CWE-2501.8%