← CVE Intelligence

CVE-2022-3340

Trellix IPS Manager vulnerable to XXE PUBLISHED

Description (CNA)

XML External Entity (XXE) vulnerability in Trellix IPS Manager prior to 10.1 M8 allows a remote authenticated administrator to perform XXE attack in the administrator interface part of the interface, which allows a saved XML configuration file to be imported.

Affected (CNA)

Vendor / productVersions
Trellix / Trellix IPS Manageraffected unspecified before 10.1 M10

CWE

CWE-611

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.