CVE-2022-35554: Bpcbt Smartvista

Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days.

Multiple reflected XSS vulnerabilities occur when handling error message of BPC SmartVista version 3.28.0 allowing an attacker to execute javascript code at client side.

Affected products

• Bpcbt Smartvista: up to and including 3.28.0

Published 2022-08-19. Last modified 2026-07-09.