Cherwell Cherwell Service Management
4 CVEs affecting Cherwell Cherwell Service Management. Latest disclosed: 2022-02-28. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-26158 | Medium | 6.1 | 2022-02-28 | An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. It accepts and reflects arbitrary domains supplied via a client-con… |
CVE-2022-26156 | Medium | 6.1 | 2022-02-28 | An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. Injection of a malicious payload within the RelayState= parameter o… |
CVE-2022-26155 | Medium | 6.1 | 2022-02-28 | An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. XSS can occur via a payload in the SAMLResponse parameter of the HT… |
CVE-2022-26157 | Medium | 5.3 | 2022-02-28 | An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. The ASP.NET_Sessionid cookie is not protected by the Secure flag. T… |