« Volver al listado

CVE-2022-46784

Estado: ModificadaMedia (6.1)—

SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows open redirection. (The issue was originally found in 5.5.1 GA.)

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Squaredup — Dashboard Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-46784",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2022-46784",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-03-12T14:48:10.976148Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 6.1,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.7,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2023-02-23T22:15:11.203",
  "references": [
    {
      "url": "https://scomsupport.squaredup.com/hc/en-us/articles/9476404091677-CVE-2022-46784-Client-side-open-redirection",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://scomsupport.squaredup.com/hc/en-us/articles/9476404091677-CVE-2022-46784-Client-side-open-redirection",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-601"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows open redirection. (The issue was originally found in 5.5.1 GA.)"
    }
  ],
  "lastModified": "2026-06-17T05:12:22.773",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:squaredup:dashboard_server:*:*:*:*:azure:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CFAF68A4-3BF5-4C7C-AB9E-1766982CAD4E",
              "versionEndExcluding": "5.7.1.9085"
            },
            {
              "criteria": "cpe:2.3:a:squaredup:dashboard_server:*:*:*:*:community:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D7EFC978-CA2D-4CE8-9974-411067B190E6",
              "versionEndExcluding": "5.7.1.9085"
            },
            {
              "criteria": "cpe:2.3:a:squaredup:dashboard_server:*:*:*:*:system_center_operations_manager:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "39DC6871-6E4B-4D92-B436-BF09B7C0D2A8",
              "versionEndExcluding": "5.7.1.9085"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}