Patchwire CVEs, their patch status, and feeds to follow them

CVE-2022-22551

No fix known EPSS <1%CVSS 8.3

DELL EMC AppSync versions 3.9 to 4.3 use GET request method with sensitive query strings. An Adjacent, unauthenticated attacker could potentially exploit this vulnerability, and hijack the victim session.

Published 2022-01-21 · CVE record · OSV

Products: Dell AppSync