CVE-2022-29540: Resi Gemini-Net

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

resi-calltrace in RESI Gemini-Net 4.2 is affected by Multiple XSS issues. Unauthenticated remote attackers can inject arbitrary web script or HTML into an HTTP GET parameter that reflects user input without sanitization. This exists on numerous application endpoints,

Affected products

• Resi Gemini-Net: version 4.2 only

Published 2022-06-02. Last modified 2026-06-17.