CVE-2022-45928
CVSS v3
8.8
HIGH
EPSS Score
2.8 %
exploit probability
CISA KEV
No
known exploited
Exploitation
—
SSVC status
Description
A remote OScript execution issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). Multiple endpoints allow the user to pass the parameter htmlFile, which is included in the HTML output rendering pipeline of a request. Because the Content Server evaluates and executes Oscript code in HTML files, it is possible for an attacker to execute Oscript code. The Oscript scripting language allows the attacker (for example) to manipulate files on the filesystem, create new network connections, or execute OS commands.
Technical details
- Published
- 2023-01-18
Frequently asked questions
What is CVE-2022-45928?
A remote OScript execution issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). Multiple endpoints allow the user to pass the parameter htmlFile, which is included in the HTML output rendering pipeline of a request. Because the Content Server evaluates and executes Oscript code in HTML files, it is possible for an attacker to execute Oscript code. The Oscript scripting language allows the attacker (for example) to manipulate files on the filesystem, create new network connections, or execute OS commands.
Is CVE-2022-45928 actively exploited?
Active exploitation of CVE-2022-45928 has not been confirmed. The EPSS score is 2.8%, indicating the estimated probability of exploitation in the next 30 days.
What is the CVSS score for CVE-2022-45928?
CVE-2022-45928 has a CVSS v3 base score of 8.8 (HIGH severity).
Is CVE-2022-45928 affecting your environment?
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.
No credit card required · 500 free checks/month · Free API key
Other 2022 vulnerabilities worth triaging
Ranked by exploit probability (EPSS).