Medium severity5.4NVD Advisory· Published May 2, 2023· Updated Jun 17, 2026

CVE-2022-47877

Description

A Stored cross-site scripting vulnerability in Jedox 2020.2.5 allows remote, authenticated users to inject arbitrary web script or HTML in the Logs page via the log module 'log'.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Jedox/Jedoxcpe-rescue3 versions
(expand)+ 2 more
- (no CPE)
- cpe:2.3:a:jedox:jedox:2020.2.5:*:*:*:*:*:*:*
- (no CPE)range: 2020.2.5

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/172153/Jedox-2020.2.5-Cross-Site-Scripting.htmlnvdExploitThird Party AdvisoryVDB Entry
docs.syslifters.com/assets/vulnerability-disclosure/Vulnerability-Disclosure-Jedox-Jedox-04-2023.pdfnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.002
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000