Read the docs

VISAM

Records16All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

VISAM records in CISA KEV

No VISAM vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

6 records in Vbase Automation Base · all components

TI-2022-22847 CVE-2022-46300 · GHSA-pvf4-hr84-4g6r

XML external entity injection in VISAM VBASE

Priority LOW 32

Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.04148 Published 2023-03-21 Fixed in 11.7.5 CWE-611
TI-2022-22426 CVE-2022-45468 · GHSA-f3qx-xrcx-25gj

XML external entity injection in VISAM VBASE

Priority LOW 28

Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01761 Published 2023-03-21 Fixed in 11.7.5 CWE-611
TI-2022-22199 CVE-2022-45121 · GHSA-qgq2-9mq2-x25j

XML external entity injection in VISAM VBASE

Priority LOW 24

Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00255 Published 2023-03-21 Fixed in 11.7.5 CWE-611
TI-2022-21294 CVE-2022-43512 · GHSA-3457-wmr8-rfxc

XML external entity injection in VISAM VBASE

Priority LOW 24

Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00255 Published 2023-03-21 Fixed in 11.7.5 CWE-611
TI-2022-20088 CVE-2022-41696 · GHSA-jq6w-j2rm-c2qq

XML external entity injection in VISAM VBASE

Priority LOW 24

Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00255 Published 2023-03-21 Fixed in 11.7.5 CWE-611
Open these records in search →