Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2022-3340

Trellix IPS Manager vulnerable to XXE

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
trellix

Description

XML External Entity (XXE) vulnerability in Trellix IPS Manager prior to 10.1 M8 allows a remote authenticated administrator to perform XXE attack in the administrator interface part of the interface, which allows a saved XML configuration file to be imported.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Trellix Trellix IPS Manager

  • unspecified to < 10.1 M10affected

References