What’s Vulnerable › Vulnerabilities

CVE-2022-40183: Reflected Cross Site Scripting (XSS) in VIDEOJET multi 4000

• Severity: medium (CVSS 4.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-10-27 · updated 2026-06-17
• Weakness: CWE-79

Description

An error in the URL handler of the VIDEOJET multi 4000 may lead to a reflected cross site scripting (XSS) in the web-based interface. An attacker with knowledge of the encoder address can send a crafted link to a user, which will execute JavaScript code in the context of the user.

Affected products

• Bosch VIDEOJET multi 4000: through 6.31.0010

References

• https://psirt.bosch.com/security-advisories/bosch-sa-454166-bt.html
• https://psirt.bosch.com/security-advisories/bosch-sa-454166-bt.html

Get alerted when CVE-2022-40183 or the next vulnerability affects your stack