5.9 Medium

CVE-2022-3340 XML External Entity (XXE) vulnerability in Trellix IPS Manager prior to 10.1 M8 allows a remote authenticated…

Description

XML External Entity (XXE) vulnerability in Trellix IPS Manager prior to 10.1 M8 allows a remote authenticated administrator to perform XXE attack in the administrator interface part of the interface, which allows a saved XML configuration file to be imported.

Affected products and versions

Product	Affected versions	Fixed in
Trellix IPS Manager	Versions not published

Do you use Trellix IPS Manager?

Track this CVE Watch Trellix IPS Manager Check my SBOMs

www.cveye.io/en/cve/CVE-2022-3340

Timeline

Published November 4, 2022
Last modified April 30, 2025

References

kcm.trellix.com kcm.trellix.com

Track this CVE