CVE-2022-38489: Easyvista Service Manager

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03 It is prone to stored Cross-site Scripting (XSS). Version 2022.1.110.1.02 fixes the vulnerably.

Affected products

• Easyvista Service Manager: version 2020.2.125.3 only; version 2022.1.109.0.03 only

Published 2023-01-10. Last modified 2026-06-17.