CVE Catalog
CVE-2022-27545
MediumCVSS 4.6Exploitation Probability (EPSS)
Low risk0.34%
25th percentile - higher than 25% of all known CVEs
Summary
Authorized users of BigFix Web Reports can perform HTML injection on the email administrative configuration page.
Risk Assessment
The risk includes the possibility of altering administrative page content, potentially leading to phishing or misleading administrators.
Recommendation
Restrict access to BigFix Web Reports to trusted users only and implement input filtering and sanitization in the email configuration.
Other vulnerabilities in BigFix Web Reports
Original NVD description (English source)
BigFix Web Reports authorized users may perform HTML injection for the email administrative configuration page.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS