CVE-2022-37775

MEDIO 6.1CVE-2022-37775 · Published 16/09/2022 · updated 09/07/2026

In breve

CVE-2022-37775 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda pureconnect (genesys).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.94%, superiore al 61.2% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
pureconnect genesys	`≤ 2022-09-26`	No fix yet

Description

Genesys PureConnect Interaction Web Tools Chat Service (up to at least 26- September- 2019) allows XSS within the Printable Chat History via the participant -> name JSON POST parameter.

References

packetstormsecurity.com/files/168410/Genesys-PureConnect-Cross-Site-Scripting.html · Exploit
cxsecurity.com/issue/WLB-2022090038 · Exploit
help.genesys.com/pureconnect/mergedprojects/wh_tr/desktop/pdfs/web_tools_dg.pdf · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free