CVSS 3.1 Score 7.5 of 10 (high)


Published Sep 19, 2023
Updated: Apr 11, 2024
CWE ID 200


CVE-2022-47554 is a cyber vulnerability that affects the products ekorCCP and ekorRCI. It exposes sensitive information in various .xml files, including files containing credentials, allowing a remote attacker to obtain critical data without authentication within the web server. The vulnerability has a high base severity score of 7.5 and a high confidentiality impact rating. The exploitability score is 3.9, indicating a moderate level of difficulty for attackers. It is classified as CWE-200, which refers to information exposure. To remediate this vulnerability, organizations should apply security patches or updates provided by the product vendors and ensure that proper access controls and authentication measures are in place to protect sensitive information from unauthorized access.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2022-47554 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options