{"id":"CVE-2022-27233","state":"PUBLISHED","title":"XML injection in the Quartus(R) Prime Programmer included in the Intel(R) Quartus Prime Pro and Standard edition software may allow an unauthenticated user to potentially enable in","description":"XML injection in the Quartus(R) Prime Programmer included in the Intel(R) Quartus Prime Pro and Standard edition software may allow an unauthenticated user to potentially enable information disclosure via network access.","publishedAt":"2022-11-11T15:48:42.749Z","updatedAt":"2025-02-05T20:52:28.158Z","severity":{"score":6.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","source":"intel"},"assigner":"intel","products":["n/a Intel(R) Quartus Prime Pro and Standard edition software"],"affected":[{"vendor":"n/a","product":"Intel(R) Quartus Prime Pro and Standard edition software","defaultStatus":"unaffected","versions":[{"version":"See reference","status":"affected"}]}],"references":["https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00659.html"],"weaknesses":["CWE-91"],"ingestedAt":"2026-10-29T19:49:52.117Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/27xxx/CVE-2022-27233.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-27233","state":"PUBLISHED","datePublished":"2022-11-11T15:48:42.749Z","dateUpdated":"2025-02-05T20:52:28.158Z","assignerShortName":"intel","assignerOrgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","requesterUserId":"524a9a6b-3515-4b97-ab85-1a9a79493852","dateReserved":"2022-03-21T23:31:41.486Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"XML injection in the Quartus(R) Prime Programmer included in the Intel(R) Quartus Prime Pro and Standard edition software may allow an unauthenticated user to potentially enable information disclosure via network access."}],"affected":[{"vendor":"n/a","product":"Intel(R) Quartus Prime Pro and Standard edition software","defaultStatus":"unaffected","versions":[{"version":"See reference","status":"affected"}]}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00659.html","name":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00659.html"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseScore":6.5,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"problemTypes":[{"descriptions":[{"lang":"en","description":"information disclosure"}]}],"providerMetadata":{"shortName":"intel","orgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateUpdated":"2023-02-07T16:09:01.371Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00659.html","name":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00659.html","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T05:25:32.302Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-01-29T20:38:52.827622Z","id":"CVE-2022-27233","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-91","type":"CWE","lang":"en","description":"CWE-91 XML Injection (aka Blind XPath Injection)"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-02-05T20:52:28.158Z"}}]}}}