CVE-2022-29303VulnerabilityPublished 07/13/2023Updated 10/24/2026
CVE-2022-29303: SolarView Compact Command Injection Vulnerability
Affects SolarView CompactSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 07/13/2023
- KEV deadline
- 08/03/2023
- EPSS
- 98.0% chance of exploitation in 30 days – higher than 99% of CVEs
What to do
CISA required action
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Description
SolarView Compact contains a command injection vulnerability due to improper validation of input values on the send test mail console of the product's web server.