CVE-2022-2188

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Privilege escalation vulnerability in DXL Broker for Windows prior to 6.0.0.280 allows local users to gain elevated privileges by exploiting weak directory controls in the logs directory. This can lead to a denial-of-service attack on the DXL Broker.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-732

Affected software

No affected versions have been published.

Timeline

Published
Nov 7, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-218807.5Windows GDI+ Information Disclosure VulnerabilityCVE-2022-218817.0Windows Kernel Elevation of Privilege VulnerabilityCVE-2022-218827.8Win32k Elevation of Privilege VulnerabilityCVE-2022-218837.5Windows Internet Key Exchange (IKE) Extension Denial of Service VulnerabilityCVE-2022-218847.8Local Security Authority Subsystem Service Elevation of Privilege VulnerabilityCVE-2022-218857.8Windows Remote Access Connection Manager Elevation of Privilege VulnerabilityCVE-2022-218877.8Win32k Elevation of Privilege VulnerabilityCVE-2022-218887.8Windows Modern Execution Server Remote Code Execution VulnerabilityCVE-2022-218897.5Windows Internet Key Exchange (IKE) Extension Denial of Service VulnerabilityCVE-2022-21896.1The WP Video Lightbox WordPress plugin before 1.9.5 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an atCVE-2022-218907.5Windows Internet Key Exchange (IKE) Extension Denial of Service VulnerabilityCVE-2022-218914.3Microsoft Dynamics 365 (on-premises) Spoofing Vulnerability
CVE-2022-2188: Medium severity, CVSS 5.5 | Vulnix