Medium severity6.5NVD Advisory· Published Jan 10, 2023· Updated Jun 17, 2026
CVE-2022-45166
CVE-2022-45166
Description
An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application accepts a set of user-controlled parameters that are used to act on the data returned to the user. It allows a basic user to access data unrelated to their role.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:archibus:archibus_web_central:2022.03.01.107:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:archibus:archibus_web_central:2022.03.01.107:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: 2022.03.01.107
Patches
Vulnerability mechanics
References
2- excellium-services.com/cert-xlm-advisory/CVE-2022-45166/nvdThird Party Advisory
- cds.thalesgroup.com/en/tcs-cert/CVE-2022-45166nvd
News mentions
0No linked articles in our index yet.