Lucene search
MitreCVELIST:CVE-2022-38342HistorySep 13, 2022 - 12:00 a.m.
CVE-2022-38342
2022-09-1300:00:00
mitre
www.cve.org
safe software fme server
xml external entity
xxe vulnerability
data exfiltration
server-side request forgery
ssrf attacks
8.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
0.001 Low
EPSS
Percentile
28.4%
Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a XML External Entity (XXE) vulnerability which allows authenticated attackers to perform data exfiltration or Server-Side Request Forgery (SSRF) attacks.
Related
prion
prion
Server side request forgery (ssrf)
2022-09-13 20:15:00
cve
cve
CVE-2022-38342
2022-09-13 20:15:09
nvd
nvd
CVE-2022-38342
2022-09-13 20:15:09
8.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
0.001 Low
EPSS
Percentile
28.4%
Related for CVELIST:CVE-2022-38342