GCVE - cpe:2.3:a:cherwell:cherwell_service_management:10.2.3:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:cherwell:cherwell_service_management:10.2.3:*:*:*:*:*:*:*

part: a version: 10.2.3 update: *

Vendor	Cherwell (`0894efc0-c9b2-56fc-aff3-53e6fb37f044`)
Product	Cherwell Service Management (`8b546f4d-7cca-5635-be31-3d1f046df001`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-26158`	vulnerable	2026-06-08 05:41:50.708702	Details available An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. It accepts and reflects arbitrary domains supplied via a client-controlled Host header. Injection of a malicious URL in the Host: header of the HTTP Request results in a 302 redirect to an attacker-controlled page. Published: 2022-02-28T15:25:53.000Z Updated: 2024-08-03T04:56:37.829Z Open on db.gcve.eu Reference links https://help.cherwell.com/bundle/release_notes_10_4_help_only/page/content/release_notes/10_4_0_fix_list.html https://github.com/l00neyhacker/CVE-2022-26158	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-26157`	vulnerable	2026-06-08 05:41:50.708405	Details available An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. The ASP.NET_Sessionid cookie is not protected by the Secure flag. This makes it prone to interception by an attacker if traffic is sent over unencrypted channels. Published: 2022-02-28T15:25:10.000Z Updated: 2024-08-03T04:56:37.881Z Open on db.gcve.eu Reference links https://help.cherwell.com/bundle/release_notes_10_4_help_only/page/content/release_notes/10_4_0_fix_list.html https://github.com/l00neyhacker/CVE-2022-26157	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-26156`	vulnerable	2026-06-08 05:41:50.708072	Details available An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. Injection of a malicious payload within the RelayState= parameter of the HTTP request body results in the hijacking of the form action. Form-action hijacking vulnerabilities arise when an application places user-supplied input into the action URL of an HTML form. An attacker can use this vulnerability to construct a URL that, if visited by another application user, will modify the action URL of a form to point to the attacker's server. Published: 2022-02-28T15:24:00.000Z Updated: 2024-08-03T04:56:37.939Z Open on db.gcve.eu Reference links https://help.cherwell.com/bundle/release_notes_10_4_help_only/page/content/release_notes/10_4_0_fix_list.html https://github.com/l00neyhacker/CVE-2022-26156	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-26155`	vulnerable	2026-06-08 05:41:50.707673	Details available An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. XSS can occur via a payload in the SAMLResponse parameter of the HTTP request body. Published: 2022-02-28T15:22:47.000Z Updated: 2024-08-03T04:56:37.878Z Open on db.gcve.eu Reference links https://help.cherwell.com/bundle/release_notes_10_4_help_only/page/content/release_notes/10_4_0_fix_list.html https://github.com/l00neyhacker/CVE-2022-26155	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Cherwell Service Management 10.2.3

Notes

PURL mappings

Vulnerability references

Contribute