What’s Vulnerable › Vulnerabilities

CVE-2022-37028

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-09-27 · updated 2026-06-17
• Weakness: CWE-79

Description

ISAMS 22.2.3.2 is prone to stored Cross-site Scripting (XSS) attack on the title field for groups, allowing an attacker to store a JavaScript payload that will be executed when another user uses the application.

Affected products

• Iris Isams: 22.2.3.2

References

• https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-37028
• https://excellium-services.com/cert-xlm-advisory/CVE-2022-37028
• https://www.isams.com/
• https://excellium-services.com/cert-xlm-advisory/CVE-2022-37028
• https://www.isams.com/

Get alerted when CVE-2022-37028 or the next vulnerability affects your stack