CVE-2022-45876: XEE
Published Apr 26, 2023
·Updated
Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.
Affected Software
2 affected components
VISAM VBASE<11.7.5
VISAM VBASE Automation Base: versions prior to 11.7.5
Remediation
Information
VISAM recommends users update to VBASE 11.7.5 or later. The update can
be performed via the VBASE Editor update dialog on machines with secure
access to the internet. Users of machines without internet access must
manually update by submitting a request form https://www.vbase.net/en/download.php to receive a download link.For more information, users should contact VISAM using the information provided on their contact page https://www.visam.com/kontakt.php (German language).
Event History
Apr 26, 2023
CVE Published
via MITRE·09:07 PM
Data Sourced
via MITRE·09:07 PM
RemedyDescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-45876?
CVE-2022-45876 is considered a medium severity vulnerability due to potential information disclosure.
2
How do I fix CVE-2022-45876?
To fix CVE-2022-45876, upgrade VBASE Automation Base to version 11.7.5 or later.
3
What does CVE-2022-45876 affect?
CVE-2022-45876 affects versions of VISAM VBASE Automation Base prior to 11.7.5.
4
What kind of information is disclosed by CVE-2022-45876?
CVE-2022-45876 may disclose sensitive information if a valid user opens a specially crafted file.
5
Who is impacted by CVE-2022-45876?
Valid users of VISAM VBASE Automation Base versions prior to 11.7.5 are impacted by CVE-2022-45876.