Lucene search

K
cvelistRedhatCVELIST:CVE-2022-2414
HistoryJul 29, 2022 - 6:58 p.m.

CVE-2022-2414

2022-07-2918:58:57
CWE-611
redhat
www.cve.org

7.7 High

AI Score

Confidence

High

0.035 Low

EPSS

Percentile

91.6%

Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests.

CNA Affected

[
  {
    "product": "Dogtag PKI",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Affected versions: 10.5.18, 10.7.4, 10.8.3, 10.11.2, 10.12.4, 11.0.5, 11.1.0"
      }
    ]
  }
]