NetSight
IP …
high8.5

CVE-2022-38342

Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a XML External Entity (XXE) vulnerability which allows authenticated attack…

Impact

Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a XML External Entity (XXE) vulnerability which allows authenticated attackers to perform data exfiltration or Server-Side Request Forgery (SSRF) attacks.

Affected products

VendorProductAffected versions
SafeFme Server
before 2021.2.6.0
from 2022.0.0.0 before 2022.0.0.2

Weakness classification

CWE-611

References