VYPR
← All advisories
Medium severity5.9NVD Advisory· Published Nov 4, 2022· Updated Jun 17, 2026

CVE-2022-3340

CVE-2022-3340

Description

XML External Entity (XXE) vulnerability in Trellix IPS Manager prior to 10.1 M8 allows a remote authenticated administrator to perform XXE attack in the administrator interface part of the interface, which allows a saved XML configuration file to be imported.

Affected products

2
  • Trellix/IPS Managerllm-fuzzy2 versions
    <10.1 M8+ 1 more
    • (no CPE)range: <10.1 M8
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.