Japan Construction Information Center DENSHI NYUSATSU CORE SYSTEM

• CVE-2022-41993 Medium 6.1 Cross-site scripting vulnerability in DENSHI NYUSATSU CORE SYSTEM v6 R4 and earlier allows a remote unauthenticated attacker to inject an arbitrary script. 0.6%
• CVE-2022-46288 Medium 6.1 Open redirect vulnerability in DENSHI NYUSATSU CORE SYSTEM v6 R4 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by havin 0.6%
• CVE-2022-46287 Medium 6.1 Cross-site scripting vulnerability in DENSHI NYUSATSU CORE SYSTEM v6 R4 and earlier allows a remote unauthenticated attacker to inject an arbitrary script. 0.6%