CVE-2022-46899
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2022-46899
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is Arbitrary File Upload. The BaseController class, that each of the service controllers derives from, allows for the upload of arbitrary files. If the HTTP request is a multipart/form-data POST request, any parameters with a filename entry will have their content written to a file in the Vocera upload-staging directory with the specified filename in the parameter.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Vocera Report Server 代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Vocera Report Server是美国Vocera公司的一个报表应用程序。用于从 Vocera 系统软件创建的数据日志中收集数据并构建报告。 Vocera Report Server 和 Voice Server 5.x - 5.8 版本存在安全漏洞，该漏洞源于 BaseController 类是每个服务控制器的基类，它允许上传任意文件。如果 HTTP 请求是一个 multipart/form-data POST 请求，并且其中包含带有文件名条目的参数，这些参数的内容将被写入到指定文件名的文件中，
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2022-46899
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-46899
请登录查看更多情报信息。
Same Patch Batch · n/a · 2023-07-25 · 18 CVEs total
| CVE-2023-37677 | Pligg CMS 代码问题漏洞 | |
| CVE-2022-31457 | RTX 路径遍历漏洞 | |
| CVE-2020-35698 | Thinkific Online Course Creation Platform 跨站脚本漏洞 | |
| CVE-2022-31458 | RTX 安全漏洞 | |
| CVE-2022-46898 | Vocera Report Server 路径遍历漏洞 | |
| CVE-2022-46900 | Vocera Report Server 路径遍历漏洞 | |
| CVE-2022-46901 | Vocera Report Server 安全漏洞 | |
| CVE-2022-46902 | Vocera Report Server 路径遍历漏洞 | |
| CVE-2023-34798 | Weaver E-Office 代码问题漏洞 | |
| CVE-2023-38745 | Pandoc 安全漏洞 | |
| CVE-2023-39128 | GNU gdb 缓冲区错误漏洞 | |
| CVE-2023-39129 | GNU gdb 资源管理错误漏洞 | |
| CVE-2023-39130 | GNU gdb 缓冲区错误漏洞 | |
| CVE-2023-32231 | Vasion PrinterLogic Client 安全漏洞 | |
| CVE-2023-32232 | Vasion PrinterLogic Client 安全漏洞 | |
| CVE-2023-33777 | Prestashop 路径遍历漏洞 | |
| CVE-2023-37361 | REDCap SQL注入漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
V. Comments for CVE-2022-46899
No comments yet