CVE-2022-2458
published 2022-08-10CVE-2022-2458: XML external entity injection(XXE) is a vulnerability that allows an attacker to interfere with an application's processing of XML data. This attack occurs…
PriorityP345high8.2CVSS 3.1
AVNACLPRNUINSUCHILAN
EPSS
0.69%
48.7th percentile
XML external entity injection(XXE) is a vulnerability that allows an attacker to interfere with an application's processing of XML data. This attack occurs when XML input containing a reference to an external entity is processed by a weakly configured XML parser. The software processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output. Here, XML external entity injection lead to External Service interaction & Internal file read in Business Central and also Kie-Server APIs.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | process_automation_manager | < 7.13.1 | 7.13.1 |
CVSS provenance
nvdv3.18.2HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
vendor_redhat8.2HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
vendor_redhat·2025-06-18·CVSS 5.5
CVE-2022-49984 [MEDIUM] CWE-476 kernel: HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
kernel: HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
In the Linux kernel, the following vulnerability has been resolved:
HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
It is possible for a malicious device to forgo submitting a Feature
Report. The HID Steam driver presently makes no prevision for this
and de-references the 'struct hid_report' pointer obtained from the
HID devices without first checking its validity. Let's change that.
A flaw was found in the hid-steam module in the Linux kernel. A NULL pointer dereference can be triggered when a malicious device fails to submit a feature report, resulting in a denial of service.
Statement: This issue has been fixed in Red Hat Enterprise Linux 9.2 via RHSA-2023:2458 [1].
[1]. https://
Red Hat
kernel: gadgetfs: ep_io - wait until IRQ finishes
vendor_redhat·2025-06-18·CVSS 5.5
CVE-2022-50028 [MEDIUM] CWE-121 kernel: gadgetfs: ep_io - wait until IRQ finishes
kernel: gadgetfs: ep_io - wait until IRQ finishes
In the Linux kernel, the following vulnerability has been resolved:
gadgetfs: ep_io - wait until IRQ finishes
after usb_ep_queue() if wait_for_completion_interruptible() is
interrupted we need to wait until IRQ gets finished.
Otherwise complete() from epio_complete() can corrupt stack.
A flaw was found in the gadgetfs module in the Linux kernel. If the wait_for_completion_interruptible() function is interrupted, the driver does not wait for the interrupt to finish, causing stack corruption and resulting in a denial of service.
Statement: This issue has been fixed in Red Hat Enterprise Linux 9.2 via RHSA-2023:2458 [1].
[1]. https://access.redhat.com/errata/RHSA-2023:2458
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Packa
Red Hat
kernel: ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe
vendor_redhat·2025-06-18·CVSS 5.5
CVE-2022-50123 [MEDIUM] CWE-911 kernel: ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe
kernel: ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe
In the Linux kernel, the following vulnerability has been resolved:
ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe
of_parse_phandle() returns a node pointer with refcount
incremented, we should use of_node_put() on it when not need anymore.
Fix missing of_node_put() in error paths.
A flaw was found in the mt8173-rt5650-rt5676 module in the Linux kernel. A missing decrement of the reference count when an error occurs will cause a memory leak, potentially impacting system performance and resulting in a denial of service.
Statement: This issue has been fixed in Red Hat Enterprise Linux 9.2 via RHSA-2023:2458 [1].
[1]. https://access.redhat.com/errata/RHSA-2023:2458
Package: ker
Red Hat
kernel: usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc()
vendor_redhat·2025-06-18·CVSS 5.5
CVE-2022-50139 [MEDIUM] CWE-911 kernel: usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc()
kernel: usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc()
In the Linux kernel, the following vulnerability has been resolved:
usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc()
We should call of_node_put() for the reference returned by
of_get_child_by_name() which has increased the refcount.
A flaw was found in the aspeed-vhub module in the Linux kernel. A missing decrement of the reference count will cause a memory leak, potentially impacting system performance and resulting in a denial of service.
Statement: This issue has been fixed in Red Hat Enterprise Linux 9.2 via RHSA-2023:2458 [1].
[1]. https://access.redhat.com/errata/RHSA-2023:2458
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affec
Red Hat
kernel: icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr.
vendor_redhat·2025-02-26·CVSS 4.7
CVE-2022-49632 [MEDIUM] CWE-362 kernel: icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr.
kernel: icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr.
In the Linux kernel, the following vulnerability has been resolved:
icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr.
While reading sysctl_icmp_errors_use_inbound_ifaddr, it can be changed
concurrently. Thus, we need to add READ_ONCE() to its reader.
A flaw was found in the Linux kernel's ICMP protocol. A race condition can occur when reading the sysctl_icmp_errors_use_inbound_ifaddr resource due to a missing lock, potentially impacting system stability and resulting in a denial of service.
Statement: This issue has been fixed in Red Hat Enterprise Linux 9.2 via RHSA-2023:2458 [1].
[1]. https://access.redhat.com/errata/RHSA-2023:2458
Mitigation: Mitigation for this issue is either not availabl
Red Hat
kernel: icmp: Fix data-races around sysctl.
vendor_redhat·2025-02-26·CVSS 4.7
CVE-2022-49638 [MEDIUM] CWE-362 kernel: icmp: Fix data-races around sysctl.
kernel: icmp: Fix data-races around sysctl.
In the Linux kernel, the following vulnerability has been resolved:
icmp: Fix data-races around sysctl.
While reading icmp sysctl variables, they can be changed concurrently.
So, we need to add READ_ONCE() to avoid data-races.
A flaw was found in the Linux kernel's ICMP protocol. A race condition can occur when reading the ICMP sysctl variables due to a missing lock, potentially impacting system stability and resulting in a denial of service.
Statement: This issue has been fixed in Red Hat Enterprise Linux 9.2 via RHSA-2023:2458 [1].
[1]. https://access.redhat.com/errata/RHSA-2023:2458
Mitigation: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising e
Red Hat
Business-central: Possible XML External Entity Injection attack
vendor_redhat·2022-07-18·CVSS 8.2
CVE-2022-2458 [HIGH] CWE-91 Business-central: Possible XML External Entity Injection attack
Business-central: Possible XML External Entity Injection attack
XML external entity injection(XXE) is a vulnerability that allows an attacker to interfere with an application's processing of XML data. This attack occurs when XML input containing a reference to an external entity is processed by a weakly configured XML parser. The software processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output. Here, XML external entity injection lead to External Service interaction & Internal file read in Business Central and also Kie-Server APIs.
An XML external entity injection(XXE) vulnerability was found in Business Central. This flaw allows an attacker to i
GHSA
GHSA-hfj4-xq5f-7mc7: XML external entity injection(XXE) is a vulnerability that allows an attacker to interfere with an application's processing of XML data
ghsa_unreviewed·2022-08-11
CVE-2022-2458 [HIGH] CWE-611 GHSA-hfj4-xq5f-7mc7: XML external entity injection(XXE) is a vulnerability that allows an attacker to interfere with an application's processing of XML data
XML external entity injection(XXE) is a vulnerability that allows an attacker to interfere with an application's processing of XML data. This attack occurs when XML input containing a reference to an external entity is processed by a weakly configured XML parser. The software processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output. Here, XML external entity injection lead to External Service interaction & Internal file read in Business Central and also Kie-Server APIs.
No detection rules found.
No public exploits indexed.
2022-08-10
Published