{"id":"CVE-2022-27233","aliases":["EUVD-2022-31742","GHSA-3254-fhc5-j338"],"status":"published","title":"XML injection in the Intel(R) Quartus Prime Pro and Standard edition software may allow an...","description":"XML injection in the Quartus(R) Prime Programmer included in the Intel(R) Quartus Prime Pro and Standard edition software may allow an unauthenticated user to potentially enable information disclosure via network access.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00738,"percentile":0.54816,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-91"],"published":"2022-11-11T15:48:42Z","modified":"2026-06-17T04:36:32Z","products":[{"vendor":"intel","product":"quartus_prime"}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00659.html","tags":["x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-27233"},{"url":"https://github.com/advisories/GHSA-3254-fhc5-j338"}],"sources":{"cve":[{"id":"CVE-2022-27233","description":"XML injection in the Quartus(R) Prime Programmer included in the Intel(R) Quartus Prime Pro and Standard edition software may allow an unauthenticated user to potentially enable information disclosure via network access.","status":"published","published":"2022-11-11T15:48:42.749Z","modified":"2025-02-05T20:52:28.158Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-91"],"updated_at":"2026-11-02T14:34:34.250357Z"}],"euvd":[{"id":"EUVD-2022-31742","description":"XML injection in the Quartus(R) Prime Programmer included in the Intel(R) Quartus Prime Pro and Standard edition software may allow an unauthenticated user to potentially enable information disclosure via network access.","status":"published","published":"2022-11-11T15:48:42Z","modified":"2025-02-05T20:52:28Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T00:04:03.798167Z"}],"ghsa":[{"id":"GHSA-3254-fhc5-j338","title":"XML injection in the Intel(R) Quartus Prime Pro and Standard edition software may allow an...","description":"XML injection in the Intel(R) Quartus Prime Pro and Standard edition software may allow an unauthenticated user to potentially enable information disclosure via network access.","status":"published","published":"2022-11-11T19:00:31Z","modified":"2023-01-28T05:03:21Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-91"],"updated_at":"2026-11-02T14:43:58.014629Z"}],"nvd":[{"id":"CVE-2022-27233","description":"XML injection in the Quartus(R) Prime Programmer included in the Intel(R) Quartus Prime Pro and Standard edition software may allow an unauthenticated user to potentially enable information disclosure via network access.","status":"published","published":"2022-11-11T16:15:13.347Z","modified":"2026-06-17T04:36:32.66Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-91"],"updated_at":"2026-11-02T14:07:31.914793Z"}]}}