CVE-2022-36664

MEDIUM WAF: High
CVSS 6.1 Published: 2022-12-26
CWE-79 CWE-79

Password Manager for IIS 2.0 has a cross-site scripting (XSS) vulnerability via the /isapi/PasswordManager.dll ResultURL parameter.

WAF Coverage Analysis

Cross-Site Scripting (XSS) High WAF Coverage

OWASP: A03:2021 Injection

941xxx - XSS / XXE
Cross-Site Scripting (XSS) High WAF Coverage

OWASP: A03:2021 Injection

941xxx - XSS / XXE

Affected Software

VendorProductVersion
adisconpassword_manager_for_iis2.0

References

Back to CVE Database