CVE-2022-31760

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services. Successful exploitation of this vulnerability may affect data integrity and confidentiality.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected software

No affected versions have been published.

Timeline

Published: Jun 13, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-317617.5Configuration defects in the secure OS module. Successful exploitation of this vulnerability will affect confidentiality.CVE-2022-317627.8The AMS module has a vulnerability in input validation. Successful exploitation of this vulnerability may cause privilege escalation.CVE-2022-317635.5The kernel module has the null pointer and out-of-bounds array vulnerabilities. Successful exploitation of this vulnerability may affect sys CVE-2022-317648.5The Lite UI of Apache ShardingSphere ElasticJob-UI allows an attacker to perform RCE by constructing a special JDBC URL of H2 database. This CVE-2022-317658.8Affected devices do not properly authorize the change password function of the web interface. This could allow low privileged users to esca CVE-2022-317668.6A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.1.2), RUGGEDCOM RM1224 LTE(4G) NA CVE-2022-317679.8IBM CICS TX Standard and Advanced 11.1 could allow a remote attacker to execute arbitrary commands on the system by sending a specially craf CVE-2022-317689.8IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which CVE-2022-317695.3IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 could allow a remote attacker to view product configuration information stored in CVE-2022-317704.9IBM App Connect Enterprise Certified Container 4.2 could allow a user from the administration console to cause a denial of service by creati CVE-2022-317726.5IBM MQ 8.0, 9.0 LTS, 9.1 CD, 9.1 LTS, 9.2 CD, and 9.2 LTS could allow an authenticated and authorized user to cause a denial of service to t CVE-2022-317738.8IBM DataPower Gateway V10CD, 10.0.1, and 2018.4.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malic