CVE-2022-40711: Primekey Ejbca

Medium severity, CVSS 4.8. EPSS: 0.5% chance of exploitation in the next 30 days.

PrimeKey EJBCA 7.9.0.2 Community allows stored XSS in the End Entity section. A user with the RA Administrator role can inject an XSS payload to target higher-privilege users.

Affected products

• Primekey Ejbca: version 7.9.0.2 only

Published 2023-01-01. Last modified 2026-06-17.