CVE-2022-45167: Archibus Web Central

Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days.

An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application allows a basic user to access the profile information of all connected users.

Affected products

• Archibus Archibus Web Central: version 2022.03.01.107 only

Published 2023-01-10. Last modified 2026-06-17.