CVE-2022-22689

HIGH 8.8CVE-2022-22689 · Published 04/02/2022 · updated 17/06/2026

In short

CVE-2022-22689 is a HIGH (CVSS 8.8) vulnerability affecting ca harvest software change manager (broadcom).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ca harvest software change manager broadcom	`= 13.0.3= 13.0.4= 14.0.0= 14.0.1`	No fix yet

Description

CA Harvest Software Change Manager versions 13.0.3, 13.0.4, 14.0.0, and 14.0.1, contain a vulnerability in the CSV export functionality, due to insufficient input validation, that can allow a privileged user to potentially execute arbitrary code or commands.

References

support.broadcom.com/security-advisory/content/security-advisories/CA20220203-01-Security-Notice-for-CA-Harvest-Software-Change-Manager/ESDSA20297 · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free