← Vulnerability feed

Vulnerability record · CVE-2022-45184 · published 14 November 2022

CVE-2022-45184: Ironmansoftware powershell universal path traversal vulnerability

Ironmansoftware · Powershell Universal

The Web Server in Ironman Software PowerShell Universal v3.x and v2.x allows for directory traversal outside of the configuration directory, which allows a remote attacker with administrator privilege to create, delete, update, and display files outside of the configuration directory via a crafted HTTP request to particular endpoints in the web server. Patched Versions are 3.5.3 and 3.4.7.

7.2 CVSS 3.1 High EPSS 2.0% · top 19.7% CWE-22 · Path traversal
7.2CVSS 3.1 base score
2.0%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

The Web Server in Ironman Software PowerShell Universal v3.x and v2.x allows for directory traversal outside of the configuration directory, which allows a remote attacker with administrator privilege to create, delete, update, and display files outside of the configuration directory via a crafted HTTP request to particular endpoints in the web server. Patched Versions are 3.5.3 and 3.4.7.

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://blog.ironmansoftware.com/psu-2022-11-cve/ Vendor Advisory
https://docs.powershelluniversal.com/changelog Release NotesVendor Advisory
https://ironmansoftware.com Vendor Advisory
https://blog.ironmansoftware.com/psu-2022-11-cve/ Vendor Advisory
https://docs.powershelluniversal.com/changelog Release NotesVendor Advisory
https://ironmansoftware.com Vendor Advisory

Track CVE-2022-45184 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2023-49213Ironmansoftware powershell universal command injection vulnerabilityThe API endpoints in Ironman PowerShell Universal 3.0.0 through 4.2.0 allow remote attackers to execute arbitrary commands via crafted HTTP requests …EPSS 2.1%8.8CVE-2022-45183Ironmansoftware powershell universal improper privilege management vulnerabilityEscalation of privileges in the Web Server in Ironman Software PowerShell Universal 2.x and 3.x allows an attacker with a valid app token to retrieve…EPSS 0.82%8.3CVE-2026-4064Ironmansoftware powershell universal missing authorization vulnerabilityMissing authorization checks on multiple gRPC service endpoints in PowerShell Universal before 2026.1.4 allows an authenticated user with any valid t…EPSS 0.38%6.5CVE-2026-3277Ironmansoftware powershell universal cleartext storage of sensitive data vulnerabilityThe OpenID Connect (OIDC) authentication configuration in PowerShell Universal before 2026.1.3 stores the OIDC client secret in cleartext in the .uni…EPSS 0.22%6.1CVE-2026-0618Ironmansoftware powershell universal cross-site scripting vulnerabilityCross-site Scripting vulnerability in Devolutions PowerShell Universal.This issue affects Powershell Universal: before 4.5.6, before 5.6.13.EPSS 0.18%5.5CVE-2026-3563Ironmansoftware powershell universal vulnerabilityImproper input validation in the apps and endpoints configuration in PowerShell Universal before 2026.1.4 allows an authenticated user with permissio…EPSS 0.40%5.3CVE-2026-8694Ironmansoftware powershell universal missing authentication for critical function vulnerabilityImproper access control in Devolutions PowerShell Universal 2026.1.7 and earlier allows an unauthenticated remote attacker to obtain the OpenAPI spec…EPSS 0.37%9.8CVE-2026-93616Checkpoint multi-domain security management path traversal vulnerabilityA directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Managem…KEVEPSS 20%

Source: NIST National Vulnerability Database (record CVE-2022-45184), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.