CVE-2022-44012: Simmeth Lieferantenmanager

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

An issue was discovered in /DS/LM_API/api/SelectionService/InsertQueryWithActiveRelationsReturnId in Simmeth Lieferantenmanager before 5.6. An attacker can execute JavaScript code in the browser of the victim if a site is loaded. The victim's encrypted password can be stolen and most likely be decrypted.

Affected products

• Simmeth Lieferantenmanager: before 5.6 (fixed in 5.6)

Published 2022-12-25. Last modified 2026-06-17.