Vulnerability in Jscom Revoworks Browser
CVE-2022-27176
Incomplete filtering of special elements vulnerability exists in RevoWorks SCVX using 'File Sanitization Library' 1.043 and prior versions, RevoWorks Browser 2.2.67 and prior versions (when using 'File Sanitization Option'), and RevoWorks Desktop 2.1.84 and prior versions (when using 'File Sanitization Option'), which may allow an attacker to execute a malicious macro by having a user to download, import, and open a specially crafted file in the local environment.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.006 (47.3th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 47th percentile — 47.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.006 · newest: 0.006 · change: 0.000
Affected products
- Jscom Revoworks Browser
- Jscom Revoworks Desktop
- Jscom Revoworks Scvx
- J’s Communication Co., Ltd. Revoworks Scvx, Browser, And — versions RevoWorks SCVX using 'File Sanitization Library' 1.043 and prior versions, RevoWorks Browser 2.2.67 and prior versions (when using 'File Sanitization Option'), and RevoWorks Desktop 2.1.84 and prior versions (when using 'File Sanitization Option')
References
- jscom.jp/news-20220527/ (Vendor Advisory)
- jvn.jp/en/jp/JVN27256219/index.html (Third Party Advisory)
Frequently asked questions
- What is CVE-2022-27176?
- CVE-2022-27176 is a high-severity vulnerability in Jscom Revoworks Browser. CVSS score: 7.8/10. Published 2022-06-14.
- How severe is CVE-2022-27176?
- High severity. CVSS v3 base score is 7.8 out of 10.