CVE-2022-32145

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability has been identified in Teamcenter Active Workspace V5.2 (All versions < V5.2.9), Teamcenter Active Workspace V6.0 (All versions < V6.0.3). A reflected cross-site scripting (XSS) vulnerability exists in the web interface of the affected application that could allow an attacker to execute malicious code by tricking users into accessing a malicious link.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Jun 14, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-321486.5Improper exposure of client IP addresses in net/http before Go 1.17.12 and Go 1.18.4 can be triggered by calling httputil.ReverseProxy.ServeCVE-2022-321497.5An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parsCVE-2022-32157.5NIOHTTP1 and projects using it for generating HTTP responses can be subject to a HTTP Response Injection attack. This occurs when a HTTP/1.1CVE-2022-321519.1The httplib and urllib Python libraries that Splunk shipped with Splunk Enterprise did not validate certificates using the certificate authoCVE-2022-321527.2Splunk Enterprise peers in Splunk Enterprise versions before 9.0 and Splunk Cloud Platform versions before 8.2.2203 did not validate the TLSCVE-2022-321538.1Splunk Enterprise peers in Splunk Enterprise versions before 9.0 and Splunk Cloud Platform versions before 8.2.2203 did not validate the TLSCVE-2022-321548.1Dashboards in Splunk Enterprise versions before 9.0 might let an attacker inject risky search commands into a form token when the token is uCVE-2022-321557.5In universal forwarder versions before 9.0, management services are available remotely by default. When not required, it introduces a potentCVE-2022-321568.1In Splunk Enterprise and Universal Forwarder versions before 9.0, the Splunk command-line interface (CLI) did not validate TLS certificates CVE-2022-321577.5Splunk Enterprise deployment servers in versions before 9.0 allow unauthenticated downloading of forwarder bundles. Remediation requires youCVE-2022-3215810.0Splunk Enterprise deployment servers in versions before 8.1.10.1, 8.2.6.1, and 9.0 let clients deploy forwarder bundles to other deployment CVE-2022-321593.5In openlibrary versions deploy-2016-07-0 through deploy-2021-12-22 are vulnerable to Stored XSS.