CVE-2022-31266

4.3 mediumEPSS 0.9%

Medium (4.3) in ilias ilias. EPSS 0.9% chance of exploitation in the next 30 days.

In ILIAS through 7.10, lack of verification when changing an email address (on the Profile Page) allows remote attackers to take over accounts.

Severity

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2022-06-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19