CVE-2022-46288

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Open redirect vulnerability in DENSHI NYUSATSU CORE SYSTEM v6 R4 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially crafted URL.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-601

Affected software

Vendor	Product	Versions
Japan Construction Information Center	DENSHI NYUSATSU CORE SYSTEM	v6 R4 and earlier

References

https://jvn.jp/en/jp/JVN96321933/index.htmlThird Party Advisory, VDB Entry
https://www.cals.jacic.or.jp/coreconso/pdf/coreconsoinfo20221215.pdfVendor Advisory
https://jvn.jp/en/jp/JVN96321933/index.htmlThird Party Advisory, VDB Entry
https://www.cals.jacic.or.jp/coreconso/pdf/coreconsoinfo20221215.pdfVendor Advisory

Timeline

Published: Dec 19, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-462897.8Multiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and master commit 530dbfa3. A CVE-2022-46295.4The Product Slider for WooCommerce WordPress plugin before 2.6.4 does not validate and escape some of its shortcode attributes before output CVE-2022-462907.8Multiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and master commit 530dbfa3. A CVE-2022-462917.8Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Bab CVE-2022-462927.8Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Bab CVE-2022-462937.8Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Bab CVE-2022-462947.8Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Bab CVE-2022-462957.8Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Bab CVE-2022-462984.4Incomplete cleanup for some Intel Unison software may allow a privileged user to potentially enable denial of service via local access.CVE-2022-462995.5Insufficient control flow management for some Intel Unison software may allow an authenticated user to potentially enable information disclo CVE-2022-46305.3Sensitive Cookie Without 'HttpOnly' Flag in GitHub repository lirantal/daloradius prior to master.CVE-2022-463005.5Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.