CVE-2022-27505

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Reflected cross site scripting (XSS)

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
CitirxCitrix SD-WAN>= unspecified, < Citrix SD-WAN Standard/Premium Edition Appliance versions 11.4.1a

References

Timeline

Published
Apr 13, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-275062.7Hard-coded credentials allow administrators to access the shell via the SD-WAN CLICVE-2022-275076.5Authenticated denial of serviceCVE-2022-275087.5Unauthenticated denial of serviceCVE-2022-275096.1Unauthenticated redirection to a malicious websiteCVE-2022-27519.8A vulnerability was found in SourceCodester Company Website CMS and classified as critical. Affected by this issue is some unknown functionaCVE-2022-275109.8Unauthorized access to Gateway user capabilitiesCVE-2022-275118.1Corruption of the system by a remote, unauthenticated user. The impact of this can include the reset of the administrator password at the neCVE-2022-275125.3Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix CVE-2022-275139.6Remote desktop takeover via phishingCVE-2022-275169.8User login brute force protection functionality bypassCVE-2022-275189.8Unauthenticated remote arbitrary code executionCVE-2022-27527.8A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under some failed login con
CVE-2022-27505: Medium severity, CVSS 6.1 | Vulnix