CVE-2022-47635

CRITICAL 9.8CVE-2022-47635 · Published 21/12/2022 · updated 17/06/2026

In short

CVE-2022-47635 is a CRITICAL (CVSS 9.8) vulnerability affecting wms (wildix).
Chance of exploitation in the next 30 days (EPSS): 0.66%, higher than 51.9% of all vulnerabilities.
Fix: update to 4.04.45396.23, 5.04.20221214, 6.02.20221216 or later.

Package	Affected versions	Patched versions
wms wildix	`≥ 4.0, < 4.04.45396.23≥ 5.0, < 5.04.20221214≥ 6.0, < 6.02.20221216`	`4.04.45396.235.04.202212146.02.20221216`

Description

Wildix WMS 6 before 6.02.20221216, WMS 5 before 5.04.20221214, and WMS4 before 4.04.45396.23 allows Server-side request forgery (SSRF) via ZohoClient.php.

References

wildix.atlassian.net/wiki/spaces/DOC/pages/30279136/Changelogs · Release Notes

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free