CVE-2022-33012: Microweber

High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Microweber v1.2.15 was discovered to allow attackers to perform an account takeover via a host header injection attack.

Affected products

• Microweber Microweber: version 1.2.15 only

Published 2022-11-22. Last modified 2026-06-17.