Fixed Intel

CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Aug 3, 2023

CVE-2022-29303

High
EPSS 94.4%CISA KEV
SolarView/Compact

Description

SolarView Compact contains a command injection vulnerability due to improper validation of input values on the send test mail console of the product's web server.

EPSS — Exploit Probability

94.4%

Higher than 100.0% of all CVEs

Required Action

https://jvn.jp/en/vu/JVNVU92327282/; https://nvd.nist.gov/vuln/detail/CVE-2022-29303

Risk Assessment

HIGH
In CISA KEV
High EPSS

Details

Severity
High
EPSS
94.4%
CISA KEV
Yes
Ransomware
Unknown
Articles
0

Timeline

Published

Jul 13, 2023

Added to KEV

Jul 13, 2023

Remediation Due

Aug 3, 2023

Affected Product

SolarView

Compact

View all SolarView CVEs