CVE-2022-34002: Pdssoftware Pds Vista 7

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

The ‘document’ parameter of PDS Vista 7’s /application/documents/display.aspx page is vulnerable to a Local File Inclusion vulnerability which allows an low-privileged authenticated attacker to leak the configuration files and source code of the web application.

Affected products

• Pdssoftware Pds Vista 7: before 7.1.7.2 (fixed in 7.1.7.2)

Published 2022-09-16. Last modified 2026-06-17.