CVE-2022-45194

Published: Nov 11, 2022

Modified: May 1, 2025

PUBLISHED

CVSS v3.1

3.8

LOW

CBRN-Analysis before 22 allows XXE attacks via am mws XML document, leading to NTLMv2-SSP hash disclosure.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

CVSS v3.1 Vector

CVSS:3.1/AC:L/AV:A/A:N/C:L/I:N/PR:N/S:C/UI:R

Attack Complexity

Low

Attack Vector

Adjacent

Availability

None

Confidentiality

Low

Integrity

None

Privileges Required

None

Scope

Changed

User Interaction

Required

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.