CVE-2022-45164: Archibus Web Central

Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application allows a basic user to cancel (delete) a booking, created by someone else - even if this basic user is not a member of the booking

Affected products

• Archibus Archibus Web Central: version 2022.03.01.107 only

Published 2023-01-10. Last modified 2026-06-17.