CVE-2022-32225: XSS

Published Jul 14, 2022

Updated

A reflected DOM-Based XSS vulnerability has been discovered in the Help directory of Veeam Management Pack for Microsoft System Center 8.0. This vulnerability could be exploited by an attacker by convincing a legitimate user to visit a crafted URL on a Veeam Management Pack for Microsoft System Center server, allowing for the execution of arbitrary scripts.

Affected Software

1 affected component

VEEAM Management Pack Microsoft System Center=8.0

Remediation

Patch Available

https://www.veeam.com/kb4338

Event History

Jul 14, 2022

CVE Published

via MITRE·02:51 PM

Data Sourced

via MITRE·02:51 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2022-32225?

CVE-2022-32225 is a reflected DOM-Based XSS vulnerability discovered in the Help directory of Veeam Management Pack for Microsoft System Center 8.0.

How can CVE-2022-32225 be exploited?

CVE-2022-32225 can be exploited by convincing a legitimate user to visit a crafted URL on Veeam Management Pack for Microsoft System Center 8.0.

What is the severity of CVE-2022-32225?

The severity of CVE-2022-32225 is medium with a CVSS score of 6.1.

Which software versions are affected by CVE-2022-32225?

CVE-2022-32225 affects Veeam Management Pack for Microsoft System Center 8.0.

How can I fix CVE-2022-32225?

To fix CVE-2022-32225, it is recommended to apply the security patch provided by Veeam or upgrade to a non-vulnerable version of the software.