CVE-2022-45128

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Improper authorization in the Intel(R) EMA software before version 1.9.0.0 may allow an authenticated user to potentially enable denial of service via local access.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-285 CWE-863

Affected software

Vendor	Product	Versions
n/a	Intel(R) EMA software	before version 1.9.0.0

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00797.htmlPatch, Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00797.htmlPatch, Vendor Advisory

Timeline

Published: May 10, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-451297.5Payara before 2022-11-04, when deployed to the root context, allows attackers to visit META-INF and WEB-INF, a different vulnerability than CVE-2022-45136.1A vulnerability, which was classified as problematic, has been found in European Environment Agency eionet.contreg. This issue affects some CVE-2022-451306.5Plesk Obsidian allows a CSRF attack, e.g., via the /api/v2/cli/commands REST API to change an Admin password. NOTE: Obsidian is a specific v CVE-2022-451329.8In Linaro Automated Validation Architecture (LAVA) before 2022.11.1, remote code execution can be achieved through user-submitted Jinja2 tem CVE-2022-451336.5Mahara 21.10 before 21.10.6, 22.04 before 22.04.4, and 22.10 before 22.10.1 allows unsafe font upload for skins. A particularly structured X CVE-2022-451349.8Mahara 21.10 before 21.10.6, 22.04 before 22.04.4, and 22.10 before 22.10.1 deserializes user input unsafely during skin import. A particula CVE-2022-451359.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Cocoon.This issue affects Apach CVE-2022-451369.8Apache Jena SDB 3.17.0 and earlier is vulnerable to a JDBC Deserialisation attack if the attacker is able to control the JDBC URL used or ca CVE-2022-451376.1The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that targets the users b CVE-2022-451389.8The configuration backend of the web-based management can be used by unauthenticated users, although only authenticated users should be able CVE-2022-451395.3A CORS Misconfiguration in the web-based management allows a malicious third party webserver to misuse all basic information pages on the we CVE-2022-45146.1A vulnerability, which was classified as problematic, was found in Opencaching Deutschland oc-server3. Affected is an unknown function of th