CVE-2022-47075

An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to download sensitive information via the action name parameter to…

High · published February 28, 2023

Patch now

High probability of exploitation

CVSS calls it high at 7.5. It sits in the 99.1th percentile for exploit probability.

CVSS v3.1

7.5

EPSS

59%

Percentile

99.1

In the wild

Unconfirmed

What it is

An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to download sensitive information via the action name parameter to ExportEmployeeDetails.aspx, and to ExportReportingManager.aspx.

The record

Technical detail

CVSS v3.1: 7.5 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.59407 · 99.1th percentile
Published: 2023-02-28T00:00Z

EPSS history

Timeline

28 FEB 00:00Z
An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to download sensitive information via the action name parameter to…
cvelistv5