Medium severity6.1NVD Advisory· Published Oct 25, 2022· Updated Jun 17, 2026

CVE-2022-38162

Description

Reflected cross-site scripting (XSS) vulnerabilities in WithSecure through 2022-08-10) exists within the F-Secure Policy Manager due to an unvalidated parameter in the endpoint, which allows remote attackers to provide a malicious input.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WithSecure/Policy Managerdescription
WithSecure/F-Secure Policy Managerllm-create

Patches

Vulnerability mechanics

References

withsecure.comnvdVendor Advisory
www.withsecure.com/en/support/security-advisoriesnvdVendor Advisory
www.withsecure.com/en/support/security-advisories/cve-2022-38162nvd

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000