{"id":"CVE-2022-36174","aliases":["EUVD-2022-38894","GHSA-xm2c-q8p4-pp7f"],"status":"published","title":"FreshService Windows Agent \u003c 2.11.0 and FreshService macOS Agent \u003c 4.2.0 and FreshService Linux...","description":"FreshService Windows Agent \u003c 2.11.0 and FreshService macOS Agent \u003c 4.2.0 and FreshService Linux Agent \u003c 3.3.0. are vulnerable to Broken integrity checking via the FreshAgent client and scheduled update service.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00528,"percentile":0.44963,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-354"],"published":"2022-09-12T20:55:52Z","modified":"2026-06-17T04:53:02Z","products":[{"vendor":"freshworks","product":"freshservice_agent"}],"references":[{"url":"https://community.freshworks.com/product-updates/freshservice-release-notes-april-2022-23982#Security+updates:+Discovery+Probe+and+Discovery+Agent","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory"]},{"url":"https://public-exposure.inform.social/post/integrity-checking/","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-36174"},{"url":"https://github.com/advisories/GHSA-xm2c-q8p4-pp7f"}],"sources":{"cve":[{"id":"CVE-2022-36174","description":"FreshService Windows Agent \u003c 2.11.0 and FreshService macOS Agent \u003c 4.2.0 and FreshService Linux Agent \u003c 3.3.0. are vulnerable to Broken integrity checking via the FreshAgent client and scheduled update service.","status":"published","published":"2022-09-12T20:55:52Z","modified":"2024-08-03T10:00:04.183Z","updated_at":"2026-11-02T14:34:35.615708Z"}],"euvd":[{"id":"EUVD-2022-38894","description":"FreshService Windows Agent \u003c 2.11.0 and FreshService macOS Agent \u003c 4.2.0 and FreshService Linux Agent \u003c 3.3.0. are vulnerable to Broken integrity checking via the FreshAgent client and scheduled update service.","status":"published","published":"2022-09-12T20:55:52Z","modified":"2024-08-03T10:00:04Z","updated_at":"2026-11-03T03:25:26.362132Z"}],"ghsa":[{"id":"GHSA-xm2c-q8p4-pp7f","title":"FreshService Windows Agent \u003c 2.11.0 and FreshService macOS Agent \u003c 4.2.0 and FreshService Linux...","description":"FreshService Windows Agent \u003c 2.11.0 and FreshService macOS Agent \u003c 4.2.0 and FreshService Linux Agent \u003c 3.3.0. are vulnerable to Broken integrity checking via the FreshAgent client and scheduled update service.","status":"published","published":"2022-09-13T00:00:33Z","modified":"2023-02-02T05:08:16Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-354"],"updated_at":"2026-11-02T14:52:42.475291Z"}],"nvd":[{"id":"CVE-2022-36174","description":"FreshService Windows Agent \u003c 2.11.0 and FreshService macOS Agent \u003c 4.2.0 and FreshService Linux Agent \u003c 3.3.0. are vulnerable to Broken integrity checking via the FreshAgent client and scheduled update service.","status":"published","published":"2022-09-12T21:15:10.763Z","modified":"2026-06-17T04:53:02.053Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-354"],"updated_at":"2026-11-02T14:07:27.631109Z"}]}}