CBRN-Analysis
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-45193 | Med | 0.38 | 5.9 | 0.00 | Nov 12, 2022 | CBRN-Analysis before 22 has weak file permissions under Public Profile, leading to disclosure of file contents or privilege escalation. | ||
| CVE-2022-45194 | Low | 0.25 | 3.8 | 0.00 | Nov 12, 2022 | CBRN-Analysis before 22 allows XXE attacks via am mws XML document, leading to NTLMv2-SSP hash disclosure. |
- risk 0.38cvss 5.9epss 0.00
CBRN-Analysis before 22 has weak file permissions under Public Profile, leading to disclosure of file contents or privilege escalation.
- risk 0.25cvss 3.8epss 0.00
CBRN-Analysis before 22 allows XXE attacks via am mws XML document, leading to NTLMv2-SSP hash disclosure.