CVE-2022-35554

PoC —

CVSS 3.1

6.1 medium

EPSS

<1%p43

Published

Aug 19, 2022 (Aug 19, 2022)

Modified

Jul 9, 2026

Description

Multiple reflected XSS vulnerabilities occur when handling error message of BPC SmartVista version 3.28.0 allowing an attacker to execute javascript code at client side.

Vendors: bpcbt
Products: smartvista
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.