CVE-2022-38162: Withsecure F-Secure Policy Manager

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Reflected cross-site scripting (XSS) vulnerabilities in WithSecure through 2022-08-10) exists within the F-Secure Policy Manager due to an unvalidated parameter in the endpoint, which allows remote attackers to provide a malicious input.

Affected products

• Withsecure F-Secure Policy Manager: affected versions not specified

Published 2022-10-25. Last modified 2026-06-17.