SEPTEMBER 27, 2026
Live Feed
Back to database
Case File

CVE-2022-45166

MEDIUM · CVSS 6.5 EPSS 0.48%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-01-10 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 6.5. See the original NVD description below for full technical details.

CVE
CVE-2022-45166
Severity
MEDIUM
CVSS
6.5
EPSS
0.48%

Original NVD Description

An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application accepts a set of user-controlled parameters that are used to act on the data returned to the user. It allows a basic user to access data unrelated to their role.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2022-45167 MEDIUM CVE-2022-45165 MEDIUM CVE-2022-45164 MEDIUM CVE-2022-28862 CRITICAL CVE-2021-41553 CRITICAL CVE-2021-41555 MEDIUM