CVSS 3.1
8.8 highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2022-1414
High (8.8) in redhat 3scale api management. EPSS 0.9% chance of exploitation in the next 30 days.
3scale API Management 2 does not perform adequate sanitation for user input in multiple fields. An authenticated user could use this flaw to inject scripts and possibly gain access to sensitive information or conduct further attacks.
Severity
- EPSS
- 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-20, CWE-1173
- Published
- Modified
- Record from
- the NVD, synced
Affected
- redhat:3scale_api_management