Skip to main content

3Scale Api Management CVE-2022-1414

HIGH
Improper Use of Validation Framework (CWE-1173)
2022-10-19 secalert@redhat.com
Information Disclosure 3Scale Api Management
8.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
8.8 HIGH
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Oct 19, 2022 - 18:15 nvd
HIGH 8.8

DescriptionNVD

3scale API Management 2 does not perform adequate sanitation for user input in multiple fields. An authenticated user could use this flaw to inject scripts and possibly gain access to sensitive information or conduct further attacks.

AnalysisAI

3scale API Management 2 does not perform adequate sanitation for user input in multiple fields. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-1173. 3scale API Management 2 does not perform adequate sanitation for user input in multiple fields. An authenticated user could use this flaw to inject scripts and possibly gain access to sensitive information or conduct further attacks. Affected products include: Redhat 3Scale Api Management.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in 3Scale Api Management

View all
CVE-2022-0330 HIGH
7.8 Mar 25

A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may r
CVE-2019-10216 HIGH
7.8 Nov 27

In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scr
CVE-2024-10295 HIGH
7.5 Oct 24

A flaw was found in Gateway. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authenticati
CVE-2021-3412 HIGH
7.3 Jun 01

It was found that all versions of 3Scale developer portal lacked brute force protections. Rated high severity (CVSS 7.3)
CVE-2021-20252 MEDIUM
6.5 Feb 23

A flaw was found in Red Hat 3scale API Management Platform 2. Rated medium severity (CVSS 6.5), this vulnerability is re
CVE-2023-4910 MEDIUM
5.5 Nov 06

A flaw was found In 3Scale Admin Portal. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Same weakness CWE-1173 – Improper Use of Validation Framework

View all
CVE-2020-1640 HIGH
7.5
CVE-2025-3940 MEDIUM
5.3
CVE-2023-30949 MEDIUM
5.3
CVE-2026-33674 LOW
2.0

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2022-1414 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy