First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-23292

LowCVSS 3.7/10Last modified Jun 17, 2026

Description

Microsoft Power BI Spoofing Vulnerability

Metrics

CVSS 3.1 3.7/10CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N

Affected software

Vendor	Product	Versions
Microsoft	Microsoft On-Premises Data Gateway	>= 3000.0.0, < 3000.118.2

References

Timeline

Published: Apr 15, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-232937.8Windows Fast FAT File System Driver Elevation of Privilege Vulnerability CVE-2022-232948.8Windows Event Tracing Remote Code Execution Vulnerability CVE-2022-232957.8Raw Image Extension Remote Code Execution Vulnerability CVE-2022-232967.8Windows Installer Elevation of Privilege Vulnerability CVE-2022-232975.5Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability CVE-2022-232987.0Windows NT OS Kernel Elevation of Privilege Vulnerability CVE-2022-232997.8Windows PDEV Elevation of Privilege Vulnerability CVE-2022-23306.5Improper Restriction of XML External Entity Reference vulnerability in DLP Endpoint for Windows prior to 11.9.100 allows a remote attacker t CVE-2022-233007.8Raw Image Extension Remote Code Execution Vulnerability CVE-2022-233017.8HEVC Video Extensions Remote Code Execution Vulnerability CVE-2022-233028.8JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j conf CVE-2022-233039.8The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks as a result of cache

CVE-2022-23292: Low severity, CVSS 3.7 | Vulnix