CVE-2022-37775 - Genesys PureConnect Interaction Web Tools Chat Service (up to at least 26- September- 2019) allows XSS within the Printable Chat History via the participant -> name JSON POST parameter

Back Back to CVE browser

MEDIUM

Genesys PureConnect Interaction Web Tools Chat Service (up to at least 26- September- 2019) allows XSS within the Printable Chat History via the participant -> name JSON POST parameter

Published Sep 16, 2022

6.1

MEDIUM

CVSS 3.1

EPSS 0.94%

Description

Genesys PureConnect Interaction Web Tools Chat Service (up to at least 26- September- 2019) allows XSS within the Printable Chat History via the participant -> name JSON POST parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (4)

http://packetstormsecurity.com/files/168410/Genesys-PureConnect-Cross-Site-Scripting.html
ExploitThird Party Advisory
https://cxsecurity.com/issue/WLB-2022090038
ExploitThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-40385
Advisory
https://help.genesys.com/pureconnect/mergedprojects/wh_tr/desktop/pdfs/web_tools_dg.pdf
Vendor Advisory

Link	Providers	Tags
http://packetstormsecurity.com/files/168410/Genesys-PureConnect-Cross-Site-Scripting.html		ExploitThird Party Advisory
https://cxsecurity.com/issue/WLB-2022090038		ExploitThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-40385		Advisory
https://help.genesys.com/pureconnect/mergedprojects/wh_tr/desktop/pdfs/web_tools_dg.pdf		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Sep 16, 2022

Updated Jul 9, 2026

Reserved Aug 8, 2022

Link CVE-2022-37775

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jul 9, 2026

Link CVE-2022-37775

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Sep 16, 2022

Updated Jul 9, 2026

Link EUVD-2022-40385

GitHub

No data