CVE-2022-39834: Keyfactor Primekey Ejbca

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

A stored XSS vulnerability was discovered in adminweb/ra/viewendentity.jsp in PrimeKey EJBCA through 7.9.0.2. A low-privilege user can store JavaScript in order to exploit a higher-privilege user.

Affected products

• Keyfactor Primekey Ejbca: up to and including 7.9.0.2

Published 2022-11-17. Last modified 2026-06-17.