{"id":"CVE-2022-3895","aliases":["EUVD-2022-43231"],"status":"published","title":"Potential XSS in common user interface component library","description":"Some UI elements of the Common User Interface Component are not properly sanitizing output and therefore prone to output arbitrary HTML (XSS).","severity":{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00291,"percentile":0.21834,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2022-11-15T14:24:49Z","modified":"2026-06-17T05:00:31Z","products":[{"vendor":"hallo welt! gmbh","product":"common user interface component"},{"vendor":"hallowelt","product":"bluespice"},{"vendor":"hallowelt","product":"common_user_interface"}],"references":[{"url":"https://en.wiki.bluespice.com/wiki/Security:Security_Advisories/BSSA-2022-08","tags":["x_transferred","Vendor Advisory"]}],"sources":{"cve":[{"id":"CVE-2022-3895","title":"Potential XSS in common user interface component library","description":"Some UI elements of the Common User Interface Component are not properly sanitizing output and therefore prone to output arbitrary HTML (XSS).","status":"published","published":"2022-11-15T14:24:49.235Z","modified":"2025-04-29T18:12:08.089Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:34:32.843656Z"}],"euvd":[{"id":"EUVD-2022-43231","description":"Some UI elements of the Common User Interface Component are not properly sanitizing output and therefore prone to output arbitrary HTML (XSS).","status":"published","published":"2022-11-15T14:24:49Z","modified":"2025-04-29T18:12:08Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T20:52:00.012701Z"}],"nvd":[{"id":"CVE-2022-3895","description":"Some UI elements of the Common User Interface Component are not properly sanitizing output and therefore prone to output arbitrary HTML (XSS).","status":"published","published":"2022-11-15T15:15:12.167Z","modified":"2026-06-17T05:00:31.86Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:07:32.395456Z"}]}}