CVE-2022-3340

published 2022-11-04

CVE-2022-3340: XML External Entity (XXE) vulnerability in Trellix IPS Manager prior to 10.1 M8 allows a remote authenticated administrator to perform XXE attack in the…

Priority P3 43 high 7.2 CVSS 3.1

AV N AC L PR H UI N S U C H I H A H

XML External Entity (XXE) vulnerability in Trellix IPS Manager prior to 10.1 M8 allows a remote authenticated administrator to perform XXE attack in the administrator interface part of the interface, which allows a saved XML configuration file to be imported.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
trellix	intrusion_prevention_system_manager	< 10.1	10.1
trellix	intrusion_prevention_system_manager	—	—
trellix	trellix_ips_manager	>= unspecified < 10.1 M10	10.1 M10

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-611