CVE-2022-48289

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The bundle management module lacks authentication and control mechanisms in some APIs. Successful exploitation of this vulnerability may affect data confidentiality.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-306

Affected software

No affected versions have been published.

Timeline

Published
Feb 9, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-48295.4The Show-Hide / Collapse-Expand WordPress plugin before 1.3.0 does not validate and escape some of its shortcode attributes before outputtinCVE-2022-482909.1The phone-PC collaboration module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect data confidentiCVE-2022-482916.5The Bluetooth module has an authentication bypass vulnerability in the pairing process. Successful exploitation of this vulnerability may afCVE-2022-482926.5The Bluetooth module has an out-of-memory (OOM) vulnerability. Successful exploitation of this vulnerability may affect data confidentialityCVE-2022-482936.5The Bluetooth module has an OOM vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.CVE-2022-482947.5The IHwAttestationService interface has a defect in authentication. Successful exploitation of this vulnerability may affect data confidentiCVE-2022-482957.5The IHwAntiMalPlugin interface lacks permission verification. Successful exploitation of this vulnerability can lead to filling problems (baCVE-2022-482965.3The SystemUI has a vulnerability in permission management. Successful exploitation of this vulnerability may cause users to receive broadcasCVE-2022-482977.5The geofencing kernel code has a vulnerability of not verifying the length of the input data. Successful exploitation of this vulnerability CVE-2022-482987.5The geofencing kernel code does not verify the length of the input data. Successful exploitation of this vulnerability may cause out-of-bounCVE-2022-482997.5The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect data confidentialitCVE-2022-48305.4The Paid Memberships Pro WordPress plugin before 2.9.9 does not validate and escape some of its shortcode attributes before outputting them
CVE-2022-48289: High severity, CVSS 7.5 | Vulnix