First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-33672

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Azure Site Recovery Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Affected software

Vendor	Product	Versions
Microsoft	Azure Site Recovery VMWare to Azure	>= 9.0, < 9.49

References

Timeline

Published: Jul 12, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-336736.5Azure Site Recovery Elevation of Privilege Vulnerability CVE-2022-336748.3Azure Site Recovery Elevation of Privilege Vulnerability CVE-2022-336757.8Azure Site Recovery Elevation of Privilege Vulnerability CVE-2022-336767.2Azure Site Recovery Remote Code Execution Vulnerability CVE-2022-336777.2Azure Site Recovery Elevation of Privilege Vulnerability CVE-2022-336787.2Azure Site Recovery Remote Code Execution Vulnerability CVE-2022-336798.1Windows Kerberos Elevation of Privilege Vulnerability CVE-2022-33688.8A vulnerability within the Software Updater functionality of Avira Security for Windows allowed an attacker with write access to the filesys CVE-2022-336808.3Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability CVE-2022-336815.9Delayed TLS hostname verification in the Pulsar Java Client and the Pulsar Proxy make each client vulnerable to a man in the middle attack. CVE-2022-336825.9TLS hostname verification cannot be enabled in the Pulsar Broker's Java Client, the Pulsar Broker's Java Admin Client, the Pulsar WebSocket CVE-2022-336835.9Apache Pulsar Brokers and Proxies create an internal Pulsar Admin Client that does not verify peer TLS certificates, even when tlsAllowInsec

CVE-2022-33672: Medium severity, CVSS 6.5 | Vulnix