[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fFdsYcaJvleFtUtv5SrIaDEpbIceEDNZdDo89BBzki8g":3,"g5a-risk:CVE-2022-22290":114},{"success":4,"data":5,"meta":112},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":43,"epssPercentile":27,"epssTimeSeries":44,"severity":45,"affectedProducts":46,"affectedProductsCount":52,"references":53,"referencesCount":52,"weaknesses":59,"weaknessesCount":73,"isActivelyExploited":74,"cisaInfo":27,"otxData":27,"relatedBlogPosts":75,"seoMetadata":76,"configurations":101,"relatedVendorCves":110,"notableEvents":111},"CVE-2022-22290","What is CVE-2022-22290?","Incorrect download source UI in Downloads in Samsung Internet prior to 16.0.6.23 allows attackers to perform domain spoofing via a crafted HTML page.","2022-01-14T20:15:15.74","2022-01-21T21:15:31.573",6.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":14,"CVSSMetricV30":27,"CVSSMetricV2":34,"CVSSMetricV40":27},[15,30],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":25,"AvailabilityImpact":22,"BaseScore":11,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":22,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH","MEDIUM",null,2.8,3.6,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"mobile.security@samsung.com","Secondary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":25,"AvailabilityImpact":22,"BaseScore":11,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":22,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[35],{"Source":16,"Type":17,"CVSSData":36,"BaseSeverity":26,"ExploitabilityScore":41,"ImpactScore":42,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":4},{"Version":37,"VectorString":38,"AccessVector":20,"AccessComplexity":26,"Authentication":22,"ConfidentialityImpact":22,"IntegrityImpact":39,"AvailabilityImpact":22,"BaseScore":40,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:N\u002FI:P\u002FA:N","PARTIAL",4.3,8.6,2.9,0.00791,[43,43,43,43,43,43,43],"Medium",[47],{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"samsung","internet","*","cpe:2.3:a:samsung:internet:*:*:*:*:*:*:*:*",1,[54],{"url":55,"source":56,"tags":57},"https:\u002F\u002Fsecurity.samsungmobile.com\u002FserviceWeb.smsb?year=2022&month=1","Samsungmobile",[58],"Vendor Advisory",[60,68],{"id":61,"name":62,"description":63,"extendedDescription":64,"status":65,"abstraction":66,"structure":67},"CWE-703","Improper Check or Handling of Exceptional Conditions","The product does not properly anticipate or handle exceptional conditions that rarely occur during normal operation of the product.","","Incomplete","Pillar","Simple",{"id":69,"name":70,"description":71,"extendedDescription":64,"status":65,"abstraction":72,"structure":67},"CWE-755","Improper Handling of Exceptional Conditions","The product does not handle or incorrectly handles an exceptional condition.","Class",2,false,[],{"title":77,"metaDescription":78,"keywords":79,"canonicalUrl":80,"structuredData":81},"What is CVE-2022-22290? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2022-22290, a medium severity cyber security vulnerability from 2022. Incorrect download source UI in Downloads in Samsung Inte...","CVE-2022-22290, CVE-2022-22290 vulnerability, CVE-2022-22290 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, samsung security, internet vulnerability","\u002Fwhat-is\u002Fcve-2022-22290",{"@context":82,"@type":83,"headline":77,"description":78,"datePublished":9,"dateModified":10,"author":84,"publisher":88,"about":92,"mainEntityOfPage":96,"articleSection":99,"keywords":100},"https:\u002F\u002Fschema.org","TechArticle",{"@type":85,"name":86,"url":87},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":85,"name":86,"url":87,"logo":89},{"@type":90,"url":91},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":93,"name":6,"description":94,"additionalType":95},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":97,"@id":98},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2022-22290","Cybersecurity","CVE-2022-22290, CVE-2022-22290 vulnerability, CVE-2022-22290 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[102],{"Operator":27,"Negate":27,"Nodes":103},[104],{"Operator":105,"Negate":27,"CPEMatch":106},"OR",[107],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":108,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":109,"VersionEndIncluding":27},"9090526A-3D9C-40A2-8A25-F97473990809","16.0.6.23",[],[],{"lastModified":10,"cacheTime":113,"version":37},1793232079266,{"score":115,"band":116,"action":117,"scoredAt":118},26,"Low","Monitor","2026-10-28T06:52:52.355424+00:00"]