CVEs published in December 2022
11 tracked CVEs from 3 vendors had their first vendor advisory published in December 2022: 2 critical, 6 high. Newest first.
2 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2022-31358Critical
reflected cross-site scripting (XSS) vulnerability in Proxmox Virtual Environment prior to v7.2-3
Proxmox · 1 advisory - Added
CVE-2022-41800High
In all versions of BIG-IP, when running in Appliance mode, an authenticated user assigned the Administrator role
F5 · 1 advisory - Added
CVE-2022-41622High
BIG-IP: In all versions, BIG-IP and BIG-IQ are vulnerable to cross-site request forgery (CSRF) attacks through iControl SOAP.
F5 · 1 advisory - Added
CVE-2022-35508Critical
Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) are vulnerable to SSRF
Proxmox · 1 advisory - Added
CVE-2022-35507High
response-header CRLF injection vulnerability in the Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) web…
Proxmox · 1 advisory - Added
CVE-2022-3713High
Sophos Firewall: code injection vulnerability
Sophos · 1 advisory - Added
CVE-2022-3711Medium
Sophos Firewall: post-auth read-only SQL injection vulnerability
Sophos · 1 advisory - Added
Sophos Firewall: post-auth read-only SQL injection vulnerability
Sophos · 1 advisory - Added
CVE-2022-3709Medium
Sophos Firewall: stored XSS vulnerability
Sophos · 1 advisory - Added
CVE-2022-3696High
Sophos Firewall: post-auth code injection vulnerability
Sophos · 1 advisory - Added
CVE-2022-3226High
Sophos Firewall: OS command injection vulnerability allows admins to execute code
Sophos · 1 advisory