What’s Vulnerable › Vulnerabilities

CVE-2022-40319

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 7.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-01-17 · updated 2026-06-17
• Weakness: CWE-639

Description

The LISTSERV 17 web interface allows remote attackers to conduct Insecure Direct Object References (IDOR) attacks via a modified email address in a wa.exe URL. The impact is unauthorized modification of a victim's LISTSERV account.

Affected products

• Lsoft Listserv: 17.0

References

• https://packetstormsecurity.com/2301-exploits/listserv17-idor.txt
• https://peach.ease.lsoft.com/scripts/wa-PEACH.exe?A0=LSTSRV-L
• https://packetstormsecurity.com/2301-exploits/listserv17-idor.txt
• https://peach.ease.lsoft.com/scripts/wa-PEACH.exe?A0=LSTSRV-L

Get alerted when CVE-2022-40319 or the next vulnerability affects your stack