7.8
CVE-2022-37931
- EPSS 0.08%
- Published 22.11.2022 05:15:11
- Last modified 21.11.2024 07:15:24
- Source security-alert@hpe.com
- Teams watchlist Login
- Open Login
A vulnerability in NetBatch-Plus software allows unauthorized access to the application. HPE has provided a workaround and fix. Please refer to HPE Security Bulletin HPESBNS04388 for details.
Data is provided by the National Vulnerability Database (NVD)
Hp ≫ Nonstop Netbatch-plus Version >= t9189h01 < t9189h01\^abw
Hp ≫ Nonstop Netbatch-plus Version >= t9189l01 < t9189l01\^aby
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
Type | Source | Score | Percentile |
---|---|---|---|
EPSS | FIRST.org | 0.08% | 0.25 |
Source | Base Score | Exploit Score | Impact Score | Vector string |
---|---|---|---|---|
nvd@nist.gov | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
security-alert@hpe.com | 7.3 | 1.8 | 5.5 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.