Security Advisory

CVE-2022-39054

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-09-28 03:25:41

Last updated 2025-05-21 14:19:39

Assigner twcert

CVSS score 6.1

State PUBLISHED

Description

Cowell enterprise travel management system has insufficient filtering for special characters within web URL. An unauthenticated remote attacker can inject JavaScript and perform XSS (Reflected Cross-Site Scripting) attack.

← Browse all CVEs View on cve.org ↗