What is CVE-2022-1414?

CVE-2022-1414 is a high-severity vulnerability in Redhat 3scale_api_management, classified under CWE-1173. CVSS score: 8.8/10. Published 2022-10-19.

How severe is CVE-2022-1414?

High severity. CVSS v3 base score is 8.8 out of 10.

Improper input validation in Redhat 3scale_api_management

CVE-2022-1414

3scale API Management 2 does not perform adequate sanitation for user input in multiple fields. An authenticated user could use this flaw to inject scripts and possibly gain access to sensitive information or conduct further attacks.

EPSS: 0.008 (51.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Redhat 3scale_api_management — versions 2.0
N/a 3scale-amp-system — versions 3scale-amp-system as shipped in 3scale-AMP 2

Weakness classification (CWE)

References

secalert@redhat.com (Issue Tracking, Vendor Advisory)
secalert@redhat.com (Vendor Advisory)

Frequently asked questions

What is CVE-2022-1414?: CVE-2022-1414 is a high-severity vulnerability in Redhat 3scale_api_management, classified under CWE-1173. CVSS score: 8.8/10. Published 2022-10-19.
How severe is CVE-2022-1414?: High severity. CVSS v3 base score is 8.8 out of 10.