Vulnerabilities

TI-2022-18811 CVE-2022-39813 · GHSA-hg2v-4w64-9f23

Italtel NetMatch-S CI 5.2.0-20211008 allows Multiple Reflected/Stored XSS issues under…

MEDIUM 60

Italtel NetMatch-S CI 5.2.0-20211008 allows Multiple Reflected/Stored XSS issues under NMSCIWebGui/j_security_check via the j_username parameter, or NMSCIWebGui/actloglineview.jsp via the name or actLine parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00475 Published 2023-01-27 No fix listed CWE-79

TI-2022-18810 CVE-2022-39812 · GHSA-j282-vg3j-rc2j

Italtel NetMatch-S CI 5.2.0-20211008 allows Absolute Path Traversal under…

HIGH 72

Italtel NetMatch-S CI 5.2.0-20211008 allows Absolute Path Traversal under NMSCI-WebGui/SaveFileUploader.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00971 Published 2023-01-27 No fix listed CWE-22

TI-2022-18809 CVE-2022-39811 · GHSA-prp9-w269-43r4

Italtel NetMatch-S CI 5.2.0-20211008 has incorrect Access Control under…

HIGH 80

Italtel NetMatch-S CI 5.2.0-20211008 has incorrect Access Control under NMSCI-WebGui/advancedsettings.jsp and NMSCIWebGui/SaveFileUploader.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00832 Published 2023-01-27 No fix listed CWE-862

Vulnerabilities

Filters

Italtel NetMatch-S CI 5.2.0-20211008 allows Multiple Reflected/Stored XSS issues under…

Italtel NetMatch-S CI 5.2.0-20211008 allows Absolute Path Traversal under…

Italtel NetMatch-S CI 5.2.0-20211008 has incorrect Access Control under…