cve.bz

CVE-2022-39289

7.5 highEPSS 1.0%

High (7.5) in zoneminder zoneminder. EPSS 1.0% chance of exploitation in the next 30 days.

ZoneMinder is a free, open source Closed-circuit television software application. In affected versions the ZoneMinder API Exposes Database Log contents to user without privileges, allows insertion, modification, deletion of logs without System Privileges. Users are advised yo upgrade as soon as possible. Users unable to upgrade should disable database logging.

Severity

CVSS 3.1

7.5 high
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
1.0% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
CWEs
CWE-862, CWE-200, CWE-287
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON