Skip to content

CyberSecBulletin

CVEs published on July 8, 2022

8 vulnerabilities, ordered with the most urgent first.

9.8 Critical severity
roxy-wi: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-31137Jul 8, 2022Hap-wiEPSS 90.6%
9.8 Critical severity
Rpc.py: Insufficiently Protected Credentials
CVE-2022-35411Jul 8, 2022Rpc.py ProjectEPSS 46.6%
8.8 High severity
WebSphere Application Server Liberty: Authentication Bypass by Spoofing
CVE-2022-22476Jul 8, 2022IBM
9.8 Critical severity
keycloak: Authorization Bypass Through User-Controlled Key
CVE-2022-1245Jul 8, 2022KeycloakEPSS 1.45%
9.8 Critical severity
HPE IceWall SSO: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-28623Jul 8, 2022HPE IceWall SSO
9.8 Critical severity
Webswing: Improper Neutralization of Special Elements in Output Used by a Downstream Component
CVE-2022-34914Jul 8, 2022WebswingEPSS 1.07%
7.5 High severity
Security Verify Access: Inadequate Encryption Strength
CVE-2022-22464Jul 8, 2022IBM
7.5 High severity
Mat2: Improper Limitation of a Pathname to a Restricted Directory
CVE-2022-35410Jul 8, 20220xacabEPSS 2.27%