CVE-2022-2414

—

CVSS 3.1

7.5 high

EPSS

86%p100

Published

Jul 29, 2022 (Jul 29, 2022)

Modified

Jun 17, 2026

Description

Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests.

Vendors: dogtagpki
Products: dogtagpki
Weakness: CWE-611
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (85.6%)

In the news0 stories

No ingested article mentions this CVE yet.