CVE-2022-40183EPSS p25.3%

CVE-2022-40183CVE-2022-40183

bosch / videojet_multi_4000_firmware

Description

An error in the URL handler of the VIDEOJET multi 4000 may lead to a reflected cross site scripting (XSS) in the web-based interface. An attacker with knowledge of the encoder address can send a crafted link to a user, which will execute JavaScript code in the context of the user.

Scoring

CVSS 5.8 ()
VectorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L
EPSS0.34% probability of exploitation · percentile 25.3% · 2026-10-05T12:00:23Z
Last modified2026-06-17
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.