VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 4, 2022· Updated Apr 30, 2025

Trellix IPS Manager vulnerable to XXE

CVE-2022-3340

Description

XML External Entity (XXE) vulnerability in Trellix IPS Manager prior to 10.1 M8 allows a remote authenticated administrator to perform XXE attack in the administrator interface part of the interface, which allows a saved XML configuration file to be imported.

Affected products

2
  • Trellix/IPS Managerllm-fuzzy2 versions
    <10.1 M8+ 1 more
    • (no CPE)range: <10.1 M8
    • (no CPE)range: unspecified

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.