CVE-2022-1074 - TEM FLEX-1085 injection

Back Back to CVE browser

MEDIUM

TEM FLEX-1085 injection

Published Mar 29, 2022

5.4

MEDIUM

CVSS 3.1

EPSS 0.44%

Description

A vulnerability has been found in TEM FLEX-1085 1.6.0 and classified as problematic. Using the input <h1>HTML Injection</h1> in the WiFi settings of the dashboard leads to html injection.

Affected products

Vendor TEM Product FLEX-1085 Default
unknown
Affected
- 1.6.0

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
TEM	FLEX-1085	unknown	Affected 1.6.0

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-74

CWE-79

Cross-site Scripting (XSS)

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-24418
Advisory
https://vuldb.com/?id.194845
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-24418		Advisory
https://vuldb.com/?id.194845		x_refsource_MISCThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner VulDB

Published Mar 29, 2022

Updated Apr 15, 2025

Reserved Mar 25, 2022

Link CVE-2022-1074

CISA Vulnrichment

Updated Apr 14, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-1074

Red Hat

No data

ENISA EUVD

Assigner VulDB

Published Mar 29, 2022

Updated Apr 15, 2025

Link EUVD-2022-24418

GitHub

No data