Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-27233

XML injection in the Quartus(R) Prime Programmer included in the Intel(R) Quartus Prime Pro and Standard edition software may allow an unauthenticated user to potentially enable information disclosure via network access.

Published

2022-11-11T16:15:13.347

Last Modified

2025-02-05T21:15:16.120

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-91
  • Type: Secondary
    CWE-91
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application intel quartus_prime ≤ 21.1 Yes
Application intel quartus_prime < 22.1 Yes
References