{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/53285?format=json","vulnerability_id":"VCID-veh9-tpze-yyd1","summary":"Exposure of Sensitive Information in OPCFoundation.NetStandard.Opc.Ua.Server\nOPC UA .NET Standard Reference Server 1.04.368 allows a remote attacker to cause the application to access sensitive information.","aliases":[{"alias":"CVE-2022-33916"},{"alias":"GHSA-mw9h-hcp7-fgc6"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/80910?format=json","purl":"pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.370.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-eckc-sv2r-uygz"},{"vulnerability":"VCID-wbtc-7rp8-1qbq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.370.9"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/325833?format=json","purl":"pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.363.104-preview","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-eckc-sv2r-uygz"},{"vulnerability":"VCID-veh9-tpze-yyd1"},{"vulnerability":"VCID-wbtc-7rp8-1qbq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.363.104-preview"},{"url":"http://public2.vulnerablecode.io/api/packages/325834?format=json","purl":"pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.363.107","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-eckc-sv2r-uygz"},{"vulnerability":"VCID-veh9-tpze-yyd1"},{"vulnerability":"VCID-wbtc-7rp8-1qbq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.363.107"},{"url":"http://public2.vulnerablecode.io/api/packages/325835?format=json","purl":"pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.364.40","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-eckc-sv2r-uygz"},{"vulnerability":"VCID-veh9-tpze-yyd1"},{"vulnerability":"VCID-wbtc-7rp8-1qbq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.364.40"},{"url":"http://public2.vulnerablecode.io/api/packages/325836?format=json","purl":"pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.365-gfc341ee8c5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-eckc-sv2r-uygz"},{"vulnerability":"VCID-veh9-tpze-yyd1"},{"vulnerability":"VCID-wbtc-7rp8-1qbq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.365-gfc341ee8c5"},{"url":"http://public2.vulnerablecode.io/api/packages/325837?format=json","purl":"pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.365.1-preview","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-eckc-sv2r-uygz"},{"vulnerability":"VCID-veh9-tpze-yyd1"},{"vulnerability":"VCID-wbtc-7rp8-1qbq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.365.1-preview"},{"url":"http://public2.vulnerablecode.io/api/packages/325838?format=json","purl":"pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.365.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-eckc-sv2r-uygz"},{"vulnerability":"VCID-veh9-tpze-yyd1"},{"vulnerability":"VCID-wbtc-7rp8-1qbq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.365.2"},{"url":"http://public2.vulnerablecode.io/api/packages/325839?format=json","purl":"pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.365.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-eckc-sv2r-uygz"},{"vulnerability":"VCID-veh9-tpze-yyd1"},{"vulnerability":"VCID-wbtc-7rp8-1qbq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.365.10"},{"url":"http://public2.vulnerablecode.io/api/packages/325840?format=json","purl":"pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.365.23","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-eckc-sv2r-uygz"},{"vulnerability":"VCID-veh9-tpze-yyd1"},{"vulnerability":"VCID-wbtc-7rp8-1qbq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.365.23"},{"url":"http://public2.vulnerablecode.io/api/packages/325841?format=json","purl":"pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.365.48","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-eckc-sv2r-uygz"},{"vulnerability":"VCID-veh9-tpze-yyd1"},{"vulnerability":"VCID-wbtc-7rp8-1qbq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.365.48"},{"url":"http://public2.vulnerablecode.io/api/packages/325842?format=json","purl":"pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.366.31-preview","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-eckc-sv2r-uygz"},{"vulnerability":"VCID-veh9-tpze-yyd1"},{"vulnerability":"VCID-wbtc-7rp8-1qbq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.366.31-preview"},{"url":"http://public2.vulnerablecode.io/api/packages/325843?format=json","purl":"pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.366.38","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-eckc-sv2r-uygz"},{"vulnerability":"VCID-veh9-tpze-yyd1"},{"vulnerability":"VCID-wbtc-7rp8-1qbq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.366.38"},{"url":"http://public2.vulnerablecode.io/api/packages/325844?format=json","purl":"pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.367.39","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-eckc-sv2r-uygz"},{"vulnerability":"VCID-veh9-tpze-yyd1"},{"vulnerability":"VCID-wbtc-7rp8-1qbq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.367.39"},{"url":"http://public2.vulnerablecode.io/api/packages/325845?format=json","purl":"pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.367.41","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-eckc-sv2r-uygz"},{"vulnerability":"VCID-veh9-tpze-yyd1"},{"vulnerability":"VCID-wbtc-7rp8-1qbq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.367.41"},{"url":"http://public2.vulnerablecode.io/api/packages/325846?format=json","purl":"pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.367.42","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-eckc-sv2r-uygz"},{"vulnerability":"VCID-veh9-tpze-yyd1"},{"vulnerability":"VCID-wbtc-7rp8-1qbq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.367.42"},{"url":"http://public2.vulnerablecode.io/api/packages/325847?format=json","purl":"pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.367.64-preview","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-eckc-sv2r-uygz"},{"vulnerability":"VCID-veh9-tpze-yyd1"},{"vulnerability":"VCID-wbtc-7rp8-1qbq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.367.64-preview"},{"url":"http://public2.vulnerablecode.io/api/packages/325848?format=json","purl":"pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.367.75","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-eckc-sv2r-uygz"},{"vulnerability":"VCID-veh9-tpze-yyd1"},{"vulnerability":"VCID-wbtc-7rp8-1qbq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.367.75"},{"url":"http://public2.vulnerablecode.io/api/packages/325849?format=json","purl":"pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.367.95","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-eckc-sv2r-uygz"},{"vulnerability":"VCID-veh9-tpze-yyd1"},{"vulnerability":"VCID-wbtc-7rp8-1qbq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.367.95"},{"url":"http://public2.vulnerablecode.io/api/packages/325850?format=json","purl":"pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.367.100","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-eckc-sv2r-uygz"},{"vulnerability":"VCID-veh9-tpze-yyd1"},{"vulnerability":"VCID-wbtc-7rp8-1qbq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.367.100"},{"url":"http://public2.vulnerablecode.io/api/packages/325851?format=json","purl":"pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.368.27-preview","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-eckc-sv2r-uygz"},{"vulnerability":"VCID-veh9-tpze-yyd1"},{"vulnerability":"VCID-wbtc-7rp8-1qbq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.368.27-preview"},{"url":"http://public2.vulnerablecode.io/api/packages/325852?format=json","purl":"pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.368.33","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-eckc-sv2r-uygz"},{"vulnerability":"VCID-veh9-tpze-yyd1"},{"vulnerability":"VCID-wbtc-7rp8-1qbq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.368.33"},{"url":"http://public2.vulnerablecode.io/api/packages/325853?format=json","purl":"pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.368.52-preview","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-eckc-sv2r-uygz"},{"vulnerability":"VCID-veh9-tpze-yyd1"},{"vulnerability":"VCID-wbtc-7rp8-1qbq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.368.52-preview"},{"url":"http://public2.vulnerablecode.io/api/packages/325854?format=json","purl":"pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.368.53","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-eckc-sv2r-uygz"},{"vulnerability":"VCID-veh9-tpze-yyd1"},{"vulnerability":"VCID-wbtc-7rp8-1qbq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.368.53"},{"url":"http://public2.vulnerablecode.io/api/packages/325855?format=json","purl":"pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.368.58","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-eckc-sv2r-uygz"},{"vulnerability":"VCID-veh9-tpze-yyd1"},{"vulnerability":"VCID-wbtc-7rp8-1qbq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.368.58"},{"url":"http://public2.vulnerablecode.io/api/packages/325856?format=json","purl":"pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.369.30","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-eckc-sv2r-uygz"},{"vulnerability":"VCID-veh9-tpze-yyd1"},{"vulnerability":"VCID-wbtc-7rp8-1qbq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.369.30"},{"url":"http://public2.vulnerablecode.io/api/packages/325857?format=json","purl":"pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.370.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-eckc-sv2r-uygz"},{"vulnerability":"VCID-veh9-tpze-yyd1"},{"vulnerability":"VCID-wbtc-7rp8-1qbq"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/OPCFoundation.NetStandard.Opc.Ua.Server@1.4.370.1"}],"references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-33916","reference_id":"","reference_type":"","scores":[{"value":"0.00327","scoring_system":"epss","scoring_elements":"0.55586","published_at":"2026-04-29T12:55:00Z"},{"value":"0.00327","scoring_system":"epss","scoring_elements":"0.55675","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00327","scoring_system":"epss","scoring_elements":"0.55683","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00327","scoring_system":"epss","scoring_elements":"0.55663","published_at":"2026-04-12T12:55:00Z"},{"value":"0.00327","scoring_system":"epss","scoring_elements":"0.55646","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00327","scoring_system":"epss","scoring_elements":"0.55684","published_at":"2026-04-16T12:55:00Z"},{"value":"0.00327","scoring_system":"epss","scoring_elements":"0.55687","published_at":"2026-04-18T12:55:00Z"},{"value":"0.00327","scoring_system":"epss","scoring_elements":"0.55667","published_at":"2026-04-21T12:55:00Z"},{"value":"0.00327","scoring_system":"epss","scoring_elements":"0.55593","published_at":"2026-04-24T12:55:00Z"},{"value":"0.00327","scoring_system":"epss","scoring_elements":"0.55611","published_at":"2026-04-26T12:55:00Z"},{"value":"0.00327","scoring_system":"epss","scoring_elements":"0.55618","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00327","scoring_system":"epss","scoring_elements":"0.55643","published_at":"2026-04-04T12:55:00Z"},{"value":"0.00327","scoring_system":"epss","scoring_elements":"0.5562","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00327","scoring_system":"epss","scoring_elements":"0.55671","published_at":"2026-04-08T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-33916"},{"reference_url":"https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2022-33916.pdf","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2022-33916.pdf"},{"reference_url":"https://github.com/OPCFoundation/UA-.NETStandard","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/OPCFoundation/UA-.NETStandard"},{"reference_url":"https://github.com/OPCFoundation/UA-.NETStandard/commit/313aa2a2499d8690cf719a67176e131517bb8b78","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/OPCFoundation/UA-.NETStandard/commit/313aa2a2499d8690cf719a67176e131517bb8b78"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-33916","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-33916"},{"reference_url":"https://opcfoundation.org","reference_id":"","reference_type":"","scores":[],"url":"https://opcfoundation.org"},{"reference_url":"https://github.com/advisories/GHSA-mw9h-hcp7-fgc6","reference_id":"GHSA-mw9h-hcp7-fgc6","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-mw9h-hcp7-fgc6"}],"weaknesses":[{"cwe_id":200,"name":"Exposure of Sensitive Information to an Unauthorized Actor","description":"The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information."},{"cwe_id":1035,"name":"OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."},{"cwe_id":937,"name":"OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."}],"exploits":[],"severity_range_score":"4.0 - 6.9","exploitability":"0.5","weighted_severity":"6.2","risk_score":3.1,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-veh9-tpze-yyd1"}