CVE-2022-31887

CRITICAL 9.8CVE-2022-31887 · Published 28/06/2022 · updated 17/06/2026

In short

CVE-2022-31887 is a CRITICAL (CVSS 9.8) vulnerability affecting marval msm (marvalglobal).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 75.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
marval msm marvalglobal	`= 14.19.0.12476`	No fix yet

Description

Marval MSM v14.19.0.12476 has a 0-Click Account Takeover vulnerability which allows an attacker to change any user's password in the organization, this means that the user can also escalate achieve Privilege Escalation by changing the administrator password.

References

cyber-guy.gitbook.io/cyber-guy/pocs/marval-msm/0-click-account-takeover · Exploit
drive.google.com/drive/folders/12nb9KvckzhUNv4RtjlaeZi8QeFqwvkMX · Broken Link
marvalglobal.com · Product

More vulnerabilities in marval msm

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

marval msm

marvalglobal

= 14.19.0.12476

No fix yet

More vulnerabilities in marval msm

See all →