CVE-2022-37028: Iris Isams

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

ISAMS 22.2.3.2 is prone to stored Cross-site Scripting (XSS) attack on the title field for groups, allowing an attacker to store a JavaScript payload that will be executed when another user uses the application.

Affected products

• Iris Isams: version 22.2.3.2 only

Published 2022-09-27. Last modified 2026-06-17.