CVE-2022-43712

—

CVSS 3.1

6.5 medium

EPSS

<1%p39

Published

Jul 26, 2023 (Jul 26, 2023)

Modified

Jun 17, 2026

Description

POST requests to /web/mvc in GX Software XperienCentral version 10.36.0 and earlier were not blocked for uses that are not logged in. If an unauthorized user is able to bypass other security filters they are able to post unauthorized data to the server because of CVE-2022-22965.

Vendors: gxsoftware
Products: xperiencentral
Weakness: CWE-862
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.