cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score
CVE-2022-23008,https://securityvulnerability.io/vulnerability/CVE-2022-23008,JavaScript Injection Vulnerability in NGINX Controller API Management by F5,"On certain versions of NGINX Controller API Management, an authenticated attacker with user or admin privileges can exploit undisclosed API endpoints to inject malicious JavaScript code. This code is executed on associated NGINX data plane instances, leading to potential compromise of sensitive data and disruption of services. It is important to note that versions which have reached End of Technical Support (EoTS) are not evaluated for this vulnerability.",F5,Nginx Controller Api Management,5.4,MEDIUM,0.000539999979082495,false,,false,false,false,,,false,false,,2022-01-25T19:11:19.000Z,0