CVE-2022-42786

Wiesemann & Theis: XSS vulnerability in web interface of the Com-Server family

Published Nov 10, 2022 CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Description
Multiple W&T Products of the ComServer Series are prone to an XSS attack. An authenticated remote Attacker can execute arbitrary web scripts or HTML via a crafted payload injected into the title of the configuration webpage

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2022-45849 Multiple W&T Products of the ComServer Series are prone to an XSS attack. An authenticated remote Attacker can execute arbitrary web scripts or HTML via a crafted payload injected into the title of the configuration webpage
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
CERTVDE
Published
Updated
Apr 29, 2025, 2:56 PM
Reserved
Oct 11, 2022, 1:32 PM
Status
Modified
Published
Nov 10, 2022, 12:15 PM
Modified
Jun 17, 2026, 5:05 AM