21.3

DATE	CVE	VULNERABILITY TITLE	RISK
2023-02-16	CVE-2022-33892	Path Traversal vulnerability in Intel Quartus Prime Path traversal in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access. local low complexity intel CWE-22	7.8
2023-02-16	CVE-2022-33902	Unspecified vulnerability in Intel Quartus Prime Insufficient control flow management in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access. local low complexity intel	7.8
2022-11-11	CVE-2022-27233	XML Injection (aka Blind XPath Injection) vulnerability in Intel Quartus Prime XML injection in the Quartus(R) Prime Programmer included in the Intel(R) Quartus Prime Pro and Standard edition software may allow an unauthenticated user to potentially enable information disclosure via network access. network low complexity intel CWE-91	7.5