CVEs published in January 2022

43 tracked CVEs from 9 vendors had their first vendor advisory published in January 2022: 24 high, 2 in CISA KEV. Newest first.

1 more from this month is covered only by Red Hat's per-package records, listed on the Red Hat vendor page.

CVE-2021-4034HighCISA KEV
Red Hat Polkit Out-of-Bounds Read and Write Vulnerability
Commvault, Red Hat · 2 advisories
Added Jul 13, 2026
CVE-2022-23993Medium
/usr/local/www/pkg.php in pfSense CE before 2.6.0 and pfSense Plus before 22.01 uses $_REQUEST['pkg_filter'] in a PHP echo call
pfSense · 1 advisory
Added Jan 26, 2022
CVE-2022-23032Medium
BIG-IP: In all versions before 7.2.1.4
F5 · 1 advisory
Added Jan 25, 2022
CVE-2022-23031Medium
On BIG-IP FPS, ASM, and Advanced WAF versions 16.1.x before 16.1.1, 15.1.x before 15.1.4, and 14.1.x before 14.1.4.4, an XML…
F5 · 1 advisory
Added Jan 25, 2022
CVE-2022-23030Medium
BIG-IP: On version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of 13.1.x
F5 · 1 advisory
Added Jan 25, 2022
CVE-2022-23029Medium
On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and…
F5 · 1 advisory
Added Jan 25, 2022
CVE-2022-23028Medium
On BIG-IP AFM version 16.x before 16.1.0, 15.1.x before 15.1.5, 14.1.x before 14.1.4.5, and all versions of 13.1.x
F5 · 1 advisory
Added Jan 25, 2022
CVE-2022-23027Medium
On BIG-IP versions 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, 13.1.x beginning in 13.1.3.6, 12.1.5.3-12.1.6, and 11.6.5.2
F5 · 1 advisory
Added Jan 25, 2022
CVE-2022-23026Medium
On BIG-IP ASM & Advanced WAF version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of…
F5 · 1 advisory
Added Jan 25, 2022
CVE-2022-23025High
On BIG-IP version 16.1.x before 16.1.1, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x
F5 · 1 advisory
Added Jan 25, 2022
CVE-2022-23024High
On BIG-IP AFM version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.2, and all versions of 13.1.x
F5 · 1 advisory
Added Jan 25, 2022
CVE-2022-23023Medium
On BIG-IP version 16.1.x before 16.1.2.1, 15.1.x before 15.1.5, 14.1.x before 14.1.4.5, and all versions of 13.1.x and 12.1.x…
F5 · 1 advisory
Added Jan 25, 2022
CVE-2022-23022High
On BIG-IP version 16.1.x before 16.1.2, when an HTTP profile is configured on a virtual server, undisclosed requests
F5 · 1 advisory
Added Jan 25, 2022
CVE-2022-23021High
On BIG-IP version 16.1.x before 16.1.2
F5 · 1 advisory
Added Jan 25, 2022
CVE-2022-23020High
On BIG-IP version 16.1.x before 16.1.2
F5 · 1 advisory
Added Jan 25, 2022
CVE-2022-23019High
On BIG-IP version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x and 12.1.x
F5 · 1 advisory
Added Jan 25, 2022
CVE-2022-23018High
On BIG-IP AFM version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and 13.1.x beginning in 13.1.3.4
F5 · 1 advisory
Added Jan 25, 2022
CVE-2022-23017High
On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of 13.1.x
F5 · 1 advisory
Added Jan 25, 2022
CVE-2022-23016High
BIG-IP: On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1
F5 · 1 advisory
Added Jan 25, 2022
CVE-2022-23015High
On BIG-IP versions 16.x before 16.1.0, 15.1.x before 15.1.4.1, and 14.1.2.6-14.1.4.4
F5 · 1 advisory
Added Jan 25, 2022
CVE-2022-23014Medium
BIG-IP: On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1
F5 · 1 advisory
Added Jan 25, 2022
CVE-2022-23013High
On BIG-IP DNS & GTM version 16.x before 16.1.0, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x…
F5 · 1 advisory
Added Jan 25, 2022
CVE-2022-23012High
On BIG-IP versions 15.1.x before 15.1.4.1 and 14.1.x before 14.1.4.5
F5 · 1 advisory
Added Jan 25, 2022
CVE-2022-23011High
On certain hardware BIG-IP platforms, in version 15.1.x before 15.1.4 and 14.1.x before 14.1.3, virtual servers
F5 · 1 advisory
Added Jan 25, 2022
CVE-2022-23010High
On BIG-IP versions 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and…
F5 · 1 advisory
Added Jan 25, 2022
CVE-2022-23009High
On BIG-IQ Centralized Management 8.x before 8.1.0, an authenticated administrative role user on a BIG-IQ managed BIG-IP device
F5 · 1 advisory
Added Jan 25, 2022
CVE-2022-23008Medium
On NGINX Controller API Management versions 3.18.0-3.19.0, an authenticated attacker with access to the "user" or "admin" role
F5 · 1 advisory
Added Jan 25, 2022
CVE-2022-23437Unrated
Infinite loop within Apache XercesJ xml parser
Apache · 1 advisory
Added Oct 8, 2026
CVE-2021-38692High
QTS: stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard.
QNAP · 1 advisory
Added Jan 14, 2022
CVE-2021-38691High
QTS: stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard.
QNAP · 1 advisory
Added Jan 14, 2022
CVE-2021-38690High
QTS: stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard.
QNAP · 1 advisory
Added Jan 14, 2022
CVE-2021-38689High
QTS: stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard.
QNAP · 1 advisory
Added Jan 14, 2022
CVE-2021-38682High
QTS: stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard.
QNAP · 1 advisory
Added Jan 14, 2022
CVE-2021-38678Medium
open redirect vulnerability has been reported to affect QNAP device running QcalAgent.
QNAP · 1 advisory
Added Jan 14, 2022
CVE-2021-38677Medium
cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running QcalAgent.
QNAP · 1 advisory
Added Jan 14, 2022
CVE-2022-21882HighCISA KEV
Microsoft Win32k Privilege Escalation Vulnerability
MS Server · 1 advisory
Added Aug 15, 2026
CVE-2021-43951Medium
Affected versions of Atlassian Jira Service Management Server and Data Center
Atlassian · 1 advisory
Added Jan 10, 2022
CVE-2021-43949Medium
Affected versions of Atlassian Jira Service Management Server and Data Center
Atlassian · 1 advisory
Added Jan 10, 2022
CVE-2021-30360High
Users have access to the directory where the installation repair occurs.
Check Point · 1 advisory
Added Jan 10, 2022
CVE-2021-38674Medium
QTS: cross-site scripting (XSS) vulnerability has been reported to affect QTS, QuTS hero and QuTScloud.
QNAP · 1 advisory
Added Jan 7, 2022
CVE-2021-43947High
Affected versions of Atlassian Jira Server and Data Center
Atlassian · 1 advisory
Added Jan 6, 2022
CVE-2021-43946Medium
Affected versions of Atlassian Jira Server and Data Center
Atlassian · 1 advisory
Added Jan 5, 2022
CVE-2021-43942Medium
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript
Atlassian · 1 advisory
Added Jan 4, 2022