CVE-2022-27237: XSS
First published: Thu Apr 21 2022(Updated: )
There is a cross-site scripting (XSS) vulnerability in an NI Web Server component installed with several NI products. Depending on the product(s) in use, remediation guidance includes: install SystemLink version 2021 R3 or later, install FlexLogger 2022 Q2 or later, install LabVIEW 2021 SP1, install G Web Development 2022 R1 or later, or install Static Test Software Suite version 1.2 or later.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| NI FlexLogger | =2021-r2 | |
| NI FlexLogger | =2021-r3 | |
| NI FlexLogger | =2021-r4 | |
| Ni G Web Development Software | =2021 | |
| Ni G Web Development Software | =2021 | |
| NI LabVIEW | =2021 | |
| NI LabVIEW | =2021 | |
| Ni Static Test Software Suite | <1.2 | |
| NI SystemLink | =2020-r4 | |
| NI SystemLink | =2022-r1 | |
| NI SystemLink | =2022-r2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-27237?
CVE-2022-27237 is a cross-site scripting (XSS) vulnerability in an NI Web Server component installed with several NI products.
What is the severity of CVE-2022-27237?
The severity of CVE-2022-27237 is medium with a CVSS score of 6.1.
Which NI products are affected by CVE-2022-27237?
The NI products affected by CVE-2022-27237 include Ni Flexlogger, Ni G Web Development Software, Ni Labview, Ni Static Test Software Suite, and Ni Systemlink.
How can I fix CVE-2022-27237?
To fix CVE-2022-27237, you should install the recommended updates for the affected NI products.
Where can I find more information about CVE-2022-27237?
You can find more information about CVE-2022-27237 at the following link: https://www.ni.com/en-us/support/documentation/supplemental/22/cross-site-scripting-vulnerability--in-ni-web-server-component.html
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/weakness
- agent/remedy
- agent/last-modified-date
- agent/author
- agent/tags
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/ni
- canonical/ni flexlogger
- version/ni flexlogger/2021-r2
- version/ni flexlogger/2021-r3
- version/ni flexlogger/2021-r4
- canonical/ni g web development software
- version/ni g web development software/2021
- canonical/ni labview
- version/ni labview/2021
- canonical/ni static test software suite
- canonical/ni systemlink
- version/ni systemlink/2020-r4
- version/ni systemlink/2022-r1
- version/ni systemlink/2022-r2