VYPR
← All advisories
Medium severity5.9NVD Advisory· Published Nov 4, 2022· Updated Jun 17, 2026

CVE-2022-3340

CVE-2022-3340

Description

XML External Entity (XXE) vulnerability in Trellix IPS Manager prior to 10.1 M8 allows a remote authenticated administrator to perform XXE attack in the administrator interface part of the interface, which allows a saved XML configuration file to be imported.

Affected products

5
  • Trellix/Intrusion Prevention System Manager3 versions
    cpe:2.3:a:trellix:intrusion_prevention_system_manager:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:trellix:intrusion_prevention_system_manager:*:*:*:*:*:*:*:*range: <10.1
    • cpe:2.3:a:trellix:intrusion_prevention_system_manager:10.1:-:*:*:*:*:*:*
    • cpe:2.3:a:trellix:intrusion_prevention_system_manager:10.1:minor8:*:*:*:*:*:*
  • Trellix/IPS Managerllm-fuzzy2 versions
    <10.1 M8+ 1 more
    • (no CPE)range: <10.1 M8
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.