CVE-2022-37028

MEDIUM 5.4CVE-2022-37028 · Published 27/09/2022 · updated 17/06/2026

In short

CVE-2022-37028 is a MEDIUM (CVSS 5.4) vulnerability affecting isams (iris).
Chance of exploitation in the next 30 days (EPSS): 0.59%, higher than 48.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
isams iris	`= 22.2.3.2`	No fix yet

Description

ISAMS 22.2.3.2 is prone to stored Cross-site Scripting (XSS) attack on the title field for groups, allowing an attacker to store a JavaScript payload that will be executed when another user uses the application.

References

cds.thalesgroup.com/en/tcs-cert/CVE-2022-37028
excellium-services.com/cert-xlm-advisory/CVE-2022-37028 · Third Party Advisory
isams.com · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free