CVE-2022-2414
82Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 86%
from disclosure to weapon130 days
Published on NVDJul 29
1st PoC+130d
VulnCheck+474d
exploitation probability
86%top 1% of all CVEs
observed exploitation
yesVulnCheck
3 public exploit(s)
Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests.
Affected products
n/a · Dogtag PKIpublic PoCs found — 3
vulncheckvulncheck.com/xdb/b37de686e133unverifiedvulncheckvulncheck.com/xdb/b8216ceefc84unverifiedvulncheckvulncheck.com/xdb/1a211964c217unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.