What is CVE-2022-40184?

CVE-2022-40184 is a medium-severity vulnerability in Bosch Videojet Multi 4000, classified under Cross-site Scripting. CVSS score: 5.1/10. Published 2022-10-27.

How severe is CVE-2022-40184?

Medium severity. CVSS v3 base score is 5.1 out of 10.

XSS in Bosch Videojet Multi 4000

CVE-2022-40184

Incomplete filtering of JavaScript code in different configuration fields of the web based interface of the VIDEOJET multi 4000 allows an attacker with administrative credentials to store JavaScript code which will be executed for all administrators accessing the same configuration option.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.003 (22.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.1 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L.

Affected products

Bosch Videojet Multi 4000 — versions unspecified
Bosch Videojet_multi_4000
Bosch Videojet_multi_4000_firmware

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

psirt@bosch.com (Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2022-40184?: CVE-2022-40184 is a medium-severity vulnerability in Bosch Videojet Multi 4000, classified under Cross-site Scripting. CVSS score: 5.1/10. Published 2022-10-27.
How severe is CVE-2022-40184?: Medium severity. CVSS v3 base score is 5.1 out of 10.