CVE-2022-3340

Summary

XML External Entity (XXE) vulnerability in Trellix IPS Manager prior to 10.1 M8 allows a remote authenticated administrator to perform XXE attack in the administrator interface part of the interface, which allows a saved XML configuration file to be imported.

Affected Software

VendorProductVersion RangeStatus
TrellixTrellix IPS Managerunspecified < 10.1 M10affected

Weaknesses

  • CWE-611: Improper Restriction of XML External Entity Reference (CWE-611) 

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References