Vulnerabilities > Canon > Irisnext > 9.8.28

DATE CVE VULNERABILITY TITLE RISK
2022-04-25 CVE-2022-26111 Expression Language Injection vulnerability in Canon Irisnext 9.8.28
The BeanShell components of IRISNext through 9.8.28 allow execution of arbitrary commands on the target server by creating a custom search (or editing an existing/predefined search) of the documents.
network
low complexity
canon CWE-917
8.8