1. Home
  2. CVE Database
  3. CVE-2022-1414
HIGH · 8.8

CVE-2022-1414

3scale API Management 2 does not perform adequate sanitation for user input in multiple fields. An authenticated user could use this flaw to inject scripts and possibly gain access to sensitive inform...

Vulnerability Description

3scale API Management 2 does not perform adequate sanitation for user input in multiple fields. An authenticated user could use this flaw to inject scripts and possibly gain access to sensitive information or conduct further attacks.

CVSS Score

8.8

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
Redhat3Scale Api Management2.0

Related Weaknesses (CWE)

CWE-20CWE-1173

References

FAQ

What is CVE-2022-1414?

CVE-2022-1414 is a vulnerability with a CVSS score of 8.8 (HIGH). 3scale API Management 2 does not perform adequate sanitation for user input in multiple fields. An authenticated user could use this flaw to inject scripts and possibly gain access to sensitive inform...

How severe is CVE-2022-1414?

CVE-2022-1414 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-1414?

Check the references section above for vendor advisories and patch information. Affected products include: Redhat 3Scale Api Management.