CVE-2022-38165: Withsecure F-Secure Policy Manager

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Arbitrary file write in F-Secure Policy Manager through 2022-08-10 allows unauthenticated users to write the file with the contents in arbitrary locations on the F-Secure Policy Manager Server.

Affected products

• Withsecure F-Secure Policy Manager: affected versions not specified

Published 2022-11-17. Last modified 2026-06-17.