CVE-2022-47635: Wildix Wms

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Wildix WMS 6 before 6.02.20221216, WMS 5 before 5.04.20221214, and WMS4 before 4.04.45396.23 allows Server-side request forgery (SSRF) via ZohoClient.php.

Affected products

• Wildix Wms: from 4.0, before 4.04.45396.23 (fixed in 4.04.45396.23); from 5.0, before 5.04.20221214 (fixed in 5.04.20221214); from 6.0, before 6.02.20221216 (fixed in 6.02.20221216)

Published 2022-12-21. Last modified 2026-06-17.