https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-45167.htmlhttps://patchthecve.com/cve/CVE-2022-45167.htmlWed, 17 Jun 2026 05:09:30 +0000MEDIUM 4.3: An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application allows a basic user to access the profile information of all connected users.https://patchthecve.com/cve/CVE-2022-45166.htmlhttps://patchthecve.com/cve/CVE-2022-45166.htmlWed, 17 Jun 2026 05:09:30 +0000MEDIUM 6.5: An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application accepts a set of user-controlled parameters that are used to act on the data returned to the user. It allows a basic user to access data unrelated to their role.https://patchthecve.com/cve/CVE-2022-45164.htmlhttps://patchthecve.com/cve/CVE-2022-45164.htmlWed, 17 Jun 2026 05:09:30 +0000MEDIUM 4.3: An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application allows a basic user to cancel (delete) a booking, created by someone else - even if this basic user is not a member of the booking