CVE-2022-26972

MEDIO 6.1CVE-2022-26972 · Published 02/06/2022 · updated 17/06/2026

In breve

CVE-2022-26972 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda control room management suite (barco).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.57%, superiore al 47.4% delle vulnerabilità.
Correzione: aggiornare a 3.14.1 o successiva.

Package	Affected versions	Patched versions
control room management suite barco	`< 3.14.1`	`3.14.1`

Description

Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /cgi-bin endpoint. The URL parameters are not correctly sanitized, leading to reflected XSS.

References

barco.com/en/support/knowledge-base/KB12685 · Vendor Advisory
barco.com/en/support/transform-n-management-server · Product

Altre vulnerabilità di control room management suite

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

control room management suite

barco

< 3.14.1

3.14.1

Altre vulnerabilità di control room management suite

Vedi tutto →