CVE-2022-47880

MediumCVSS 5.3/10Last modified Jul 9, 2026

Description

An Information disclosure vulnerability in /be/rpc.php in Jedox GmbH Jedox 2020.2.5 allow remote, authenticated users with permissions to modify database connections to disclose a connections' cleartext password via the 'test connection' function.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-522

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://docs.syslifters.com/assets/vulnerability-disclosure/Vulnerability-Disclosure-Jedox-Jedox-04-2023.pdfExploit, Third Party Advisory
https://docs.syslifters.com/assets/vulnerability-disclosure/Vulnerability-Disclosure-Jedox-Jedox-04-2023.pdfExploit, Third Party Advisory

Timeline

Published: May 12, 2023
Last modified: Jul 9, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-478816.5Foxit PDF Reader and PDF Editor 11.2.1.53537 and earlier has an Out-of-Bounds Read vulnerability.CVE-2022-47895.4The WPZOOM Portfolio WordPress plugin before 1.2.2 does not validate and escape one of its shortcode attributes, which could allow users wit CVE-2022-478918.8All versions of NetMan 204 allow an attacker that knows the MAC and serial number of the device to reset the administrator password via the CVE-2022-478927.5All versions of NetMan 204 could allow an unauthenticated remote attacker to read a file (config.cgi) containing sensitive information, like CVE-2022-478939.8There is a remote code execution vulnerability that affects all versions of NetMan 204. A remote attacker could upload a firmware file conta CVE-2022-478945.3Improper Input Validation vulnerability in Apache Zeppelin SAP.This issue affects Apache Zeppelin SAP: from 0.8.0 before 0.11.0. As this pr CVE-2022-478957.5In JetBrains IntelliJ IDEA before 2022.3.1 the "Validate JSP File" action used the HTTP protocol to download required JAR files.CVE-2022-478967.8In JetBrains IntelliJ IDEA before 2022.3.1 code Templates were vulnerable to SSTI attacks.CVE-2022-47905.4The WP Google My Business Auto Publish WordPress plugin before 3.4 does not validate and escape one of its shortcode attributes, which could CVE-2022-479087.8Stack-based buffer overflow vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute CVE-2022-479097.8Livestatus Query Language (LQL) injection in the AuthUser HTTP query header of Tribe29's Checkmk <= 2.1.0p11, Checkmk <= 2.0.0p28, and all v CVE-2022-47915.4The Product Slider and Carousel with Category for WooCommerce WordPress plugin before 2.8 does not validate and escape one of its shortcode