LiveActive security incident?Get immediate response
CVE Record

CVE-2022-23320: XMPie uStore 12.3.7244.0 allows for administrators to generate reports based on raw SQL queries.

XMPie uStore 12.3.7244.0 allows for administrators to generate reports based on raw SQL queries. Since the application ships with default administrative credentials, an attacker may authenticate into the application and exfiltrate sensitive information from the database.

UnknownCVSS not scoredNot KEV-listedUpdated
Discuss exposureBack to CVEs
Glexia's TakeAutomated analysishigh

Security readout for executives and security teams

Plain-English summary

This issue affects XMPie uStore 12.3.7244.0. The product reportedly lets administrators run report queries directly against the database and ships with default administrator credentials. If those credentials remain valid, an attacker could log in as an administrator and extract sensitive database information.

Executive priority

Treat as high priority if uStore is exposed or default credentials may remain active. The main business risk is unauthorized access to customer, order, or operational database contents.

Technical view

CVE-2022-23320 is an authenticated data exposure risk involving administrative raw SQL reporting in XMPie uStore 12.3.7244.0. The CVE description links the impact to default administrative credentials, which could convert an admin-only function into an attacker-accessible path for database exfiltration.

Likely exposure

Exposure is most likely where XMPie uStore 12.3.7244.0 is deployed and default administrative credentials were not changed. Internet-facing admin access increases urgency, but the source bundle does not confirm affected deployment patterns.

Exploitation context

The provided sources do not show CISA KEV listing or confirmed active exploitation. The described attack path requires authentication, but default administrative credentials may provide that access if unchanged.

Researcher notes

The record lacks CVSS, CWE, detailed affected CPEs, and a named fixed version in the supplied bundle. Analysis is therefore centered on the CVE description and linked public references, with no assumption of exploitation in the wild.

Mitigation direction

  • Identify any XMPie uStore 12.3.7244.0 deployments.
  • Change or disable all default administrator credentials.
  • Restrict administrator access to trusted networks and named users.
  • Limit report-generation privileges to necessary administrators only.
  • Review XMPie release notes and vendor guidance for fixes or supported upgrade paths.
  • Audit database and report activity for unusual access or exports.

Validation and detection

  • Confirm deployed uStore versions and exposure of administrative interfaces.
  • Review administrator accounts for default, shared, or stale credentials.
  • Verify privileged report access is limited to approved administrators.
  • Inspect report history for raw SQL queries accessing sensitive data.
  • Review database logs for unusual reads or exports.
  • Check vendor release notes for remediation relevant to this CVE.
Prepared
Confidence
medium
Sources
5

Public sources used

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

description · low confidence lookup

Database behavior lookup

The CVE wording references database injection or access, so collection and exfiltration review may help. This is a Glexia inferred lookup path, not an official MITRE, ATT&CK, or CVE Program mapping.

Open ATT&CK lookup
cve · low confidence lookup

CVE-2022-23320 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Unknown
CVSS
Not scored
Known Exploited
No
Published
Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

0CVSS vectors
3Timeline events
1ADP providers
4Source links

Vulnerability timeline

Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.

  1. CVE reservedCVE Program

    The CVE ID was reserved by the assigning CNA.

  2. CVE publishedCVE Program

    The CVE record was published.

  3. CVE updatedCVE Program

    The CVE record metadata indicates this as the latest update time.

ADP provider summaries

CVECVE Program Container

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
n/an/an/aListed
Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.