CVE-2022-32225

A reflected DOM-Based XSS vulnerability has been discovered in the Help directory of Veeam Management Pack for Microsoft System Center 8.0. This vulnerability could be exploited by an attacker by convincing a legitimate user to visit a crafted URL on a Veeam Management Pack for Microsoft System Center server, allowing for the execution of arbitrary scripts.

Score

CVSS 3.1 6.1 Medium

Status

Modified - support@hackerone.com

Published

2022-07-14

Last modified

2024-08-03

Weaknesses

CWE-79

Affected products

• Management Pack (Veeam)

References

• https://www.veeam.com/kb4338