MEDIUM🇵🇱 Wersja polska

CVE-2022-27237

CVSS 6.1v3.1pub. 2022-04-21upd. 2024-11-21

There is a cross-site scripting (XSS) vulnerability in an NI Web Server component installed with several NI products. Depending on the product(s) in use, remediation guidance includes: install SystemLink version 2021 R3 or later, install FlexLogger 2022 Q2 or later, install LabVIEW 2021 SP1, install G Web Development 2022 R1 or later, or install Static Test Software Suite version 1.2 or later.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

  • Ni Flexlogger

    APP
    Ni
    2021

  • Ni G Web Development Software

    APP
    Ni
    2021

  • Ni Labview

    APP
    Ni
    2021

  • Ni Static Test Software Suite

    APP
    Ni
    < 1.2

  • Ni Systemlink

    APP
    Ni
    20202022
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
XSS
CWE
References

Related vulnerabilities

CVE-2026-64203HIGH8.5same product

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information di...

CVE-2026-64204HIGH8.5same product

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information di...

CVE-2026-64201HIGH8.5same product

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information di...

CVE-2026-64202HIGH8.5same product

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information di...

CVE-2026-32863HIGH8.5same product

There is a memory corruption vulnerability due to an out-of-bounds read in sentry_transaction_context_set_oper...