{"vulnerability": "cve-2022-2898", "sightings": [{"uuid": "338f817e-73ec-408c-84f1-dae491148607", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-28982", "type": "seen", "source": "https://t.me/cibsecurity/50255", "content": "\u203c CVE-2022-28982 \u203c\n\nA cross-site scripting (XSS) vulnerability in Liferay Portal v7.3.3 through v7.4.2 and Liferay DXP v7.3 before service pack 3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name of a tag.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-22T07:11:51.000000Z"}, {"uuid": "361df041-ea3c-4976-bad1-4acd3e94e398", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-28980", "type": "seen", "source": "https://t.me/cibsecurity/50254", "content": "\u203c CVE-2022-28980 \u203c\n\nMultiple cross-site scripting (XSS) vulnerabilities in Liferay Portal v7.4.3.4 and Liferay DXP v7.4 GA allows attackers to execute arbitrary web scripts or HTML via parameters with the filter_ prefix.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-22T07:11:50.000000Z"}, {"uuid": "1ee8f638-0c30-4b5e-a89b-5df616f3014f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-28981", "type": "seen", "source": "https://t.me/cibsecurity/50249", "content": "\u203c CVE-2022-28981 \u203c\n\nPath traversal vulnerability in the Hypermedia REST APIs module in Liferay Portal 7.4.0 through 7.4.2 allows remote attackers to access files outside of com.liferay.headless.discovery.web/META-INF/resources via the `parameter` parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-22T07:11:43.000000Z"}, {"uuid": "6c524577-1470-4585-afda-af62a523a730", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-28987", "type": "seen", "source": "https://t.me/cibsecurity/43015", "content": "\u203c CVE-2022-28987 \u203c\n\nManageEngine ADSelfService Plus v6.1 allows attackers to perform username enumeration via a crafted POST request to /ServletAPI/accounts/login.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-20T07:30:12.000000Z"}, {"uuid": "5b15356e-6417-4d89-bc25-528ed8728a4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-28985", "type": "seen", "source": "https://t.me/cibsecurity/43019", "content": "\u203c CVE-2022-28985 \u203c\n\nA stored cross-site scripting (XSS) vulnerability in the addNewPost component of OrangeHRM v4.10.1 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-20T07:30:16.000000Z"}, {"uuid": "fd978677-51dd-4495-b865-c8829d4de45f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-28987", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mdloqbexuu2s", "content": "", "creation_timestamp": "2026-01-29T21:02:29.095031Z"}, {"uuid": "310360b4-8278-4ce1-9498-e706c3002773", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-28987", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-28987.yaml", "content": "", "creation_timestamp": "2026-01-29T07:00:02.000000Z"}, {"uuid": "2c554cf1-37a6-4a54-8677-8dc92410ff0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2022-28987", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3miwohybmtf2y", "content": "", "creation_timestamp": "2026-04-07T21:03:04.403280Z"}]}