cve.bz

CVE-2022-47075

7.5 highEPSS 59%

High (7.5) in smartofficepayroll smartoffice. EPSS 59% chance of exploitation in the next 30 days.

An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to download sensitive information via the action name parameter to ExportEmployeeDetails.aspx, and to ExportReportingManager.aspx.

Severity

CVSS 3.1

7.5 high
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
59% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON