CVE-2022-45876 CVE-2022-45876

Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file...

CVE-2022-45876

CVE-2022-45876 affects VISAM VBASE Automation Base prior to 11.7.5. The vulnerability is an information-disclosure flaw tied to improper handling of XML External Entities (XXE) in ProjektInfo.XML within the VBASE Editor, requiring a valid user to open a crafted file or visit a malicious resource....

VISAM VBASE Automation Base

1. EXECUTIVE SUMMARY CVSS v3 5.5 ATTENTION: Low attack complexity Vendor: VISAM Equipment: VBASE Vulnerabilities: Improper Restriction of XML External Entity Reference 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to obtain sensitive information from...