CVE-2022-37177

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

HireVue Hiring Platform V1.0 suffers from Use of a Broken or Risky Cryptographic Algorithm. NOTE: this is disputed by the vendor for multiple reasons, e.g., it is inconsistent with CVE ID assignment rules for cloud services, and no product with version V1.0 exists. Furthermore, the rail-fence cipher has been removed, and TLS 1.2 is now used for encryption.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-327

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/JC175/CVE-2022-37177Exploit, Third Party Advisory
https://www.hirevue.com/Vendor Advisory
https://github.com/JC175/CVE-2022-37177Exploit, Third Party Advisory
https://www.hirevue.com/Vendor Advisory

Timeline

Published: Aug 29, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-371788.8An issue was discovered in 72crm 9.0. There is a SQL Injection vulnerability in View the task calendar.CVE-2022-371819.872crm 9.0 has an Arbitrary file upload vulnerability.CVE-2022-371836.1Piwigo 12.3.0 is vulnerable to Cross Site Scripting (XSS) via /search/1940/created-monthly-list.CVE-2022-371848.8The application manage_website.php on Garage Management System 1.0 is vulnerable to Shell File Upload. The already authenticated malicious u CVE-2022-371857.5SQL injection vulnerability exists in the school information query interface (repschoolproj.php) of the EMS 6.2 system of the Office of the CVE-2022-371865.9In LemonLDAP::NG before 2.0.15. some sessions are not deleted when they are supposed to be deleted according to the timeoutActivity setting.CVE-2022-371897.5DDMAL MEI2Volpiano 0.8.2 is vulnerable to XML External Entity (XXE), leading to a Denial of Service. This occurs due to the usage of the uns CVE-2022-371908.8CuppaCMS 1.0 is vulnerable to Remote Code Execution (RCE). An authenticated user can control both parameters (action and function) from "/ap CVE-2022-371916.5The component "cuppa/api/index.php" of CuppaCMS v1.0 is Vulnerable to LFI. An authenticated user can read system files via crafted POST requ CVE-2022-371937.4Chipolo ONE Bluetooth tracker (2020) Chipolo iOS app version 4.13.0 is vulnerable to Incorrect Access Control. Chipolo devices suffer from a CVE-2022-371977.8IOBit IOTransfer V4 is vulnerable to Unquoted Service Path.CVE-2022-371999.8JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/user/list.