VDB
CVE-2022-39289
CVE-2022-39289
PUBLISHED
CVSS 9.100000381469727 CRITICAL
ZoneMinder is a free, open source Closed-circuit television software application. In affected versions the ZoneMinder API Exposes Database Log contents to user without privileges, allows insertion, modification, deletion of logs without System Privileges. Users are advised yo upgrade as soon as possible. Users unable to upgrade should disable database logging.
EPSS 0.81% · 54.4th percentile
Risk Scores
CVSS 3.1
9.100000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS Score
0.81%
54.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| zoneminder | zoneminder | 0, 1.37.0 |
| ZoneMinder | zoneminder | *, * |
Timeline
- Oct 7, 2022 CVE Published
- Oct 8, 2022 EPSS Score
- Nov 21, 2022 EPSS Score
- Jan 5, 2023 EPSS Score
- Feb 18, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- May 18, 2023 EPSS Score
- Jul 1, 2023 EPSS Score
- Sep 27, 2023 EPSS Score
- Nov 11, 2023 EPSS Score
- Dec 25, 2023 EPSS Score