CVE-2022-45166: Archibus Web Central

Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days.

An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application accepts a set of user-controlled parameters that are used to act on the data returned to the user. It allows a basic user to access data unrelated to their role.

Affected products

• Archibus Archibus Web Central: version 2022.03.01.107 only

Published 2023-01-10. Last modified 2026-06-17.