CVE-2022-32555

HIGH 8.8CVE-2022-32555 · Published 13/09/2022 · updated 17/06/2026

In short

CVE-2022-32555 is a HIGH (CVSS 8.8) vulnerability affecting data exchange management studio (unisys).
Chance of exploitation in the next 30 days (EPSS): 0.35%, higher than 28.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
data exchange management studio unisys	`= 6.0.ic1= 7.0`	No fix yet

Description

Unisys Data Exchange Management Studio before 6.0.IC2 and 7.x before 7.0.IC1 doesn't have an Anti-CSRF token to authenticate the POST request. Thus, a cross-site request forgery attack could occur.

References

public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx · Vendor Advisory
unisys.com · Vendor Advisory

More vulnerabilities in data exchange management studio

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free