← CVE Intelligence

CVE-2022-47559

Cross-Site Request Forgery in Ormazabal products PUBLISHED

Description (CNA)

Lack of device control over web requests in ekorCCP and ekorRCI, allowing an attacker to create customised requests to execute malicious actions when a user is logged in, affecting availability, privacy and integrity.

Affected (CNA)

Vendor / productVersions
Ormazabal / ekorCCPaffected 601j
Ormazabal / ekorRCIaffected 601j

CWE

CWE-352

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.