CVSS 3.1
4.8 mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:NCVE-2022-26494
Medium (4.8) in primekey signserver. EPSS 0.7% chance of exploitation in the next 30 days.
An XSS was identified in the Admin Web interface of PrimeKey SignServer before 5.8.1. JavaScript code must be used in a worker name before a Generate CSR request. Only an administrator can update a worker name.
Severity
- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-11-01)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- primekey:signserver
References
- https://docs.keyfactor.com/signserver/
- https://support.keyfactor.com/hc/en-us/articles/15618125602715-Security-Advisory-SignServer-Cross-site-scripting-issue-in-Admin-Web
- https://doc.primekey.com/signserver
- https://support.primekey.com/news/posts/signserver-security-advisory-cross-site-scripting-issue-in-admin-web