Vulnerability · Published Aug 30, 2022 · Assigned by trellix
CVE-2022-2330XXE vulnerability in DLP Endpoint for Windows
Medium 6.5
In plain English
A medium-severity XML external entity in DLP Endpoint for Windows from Trellix. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 60% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.9%top 39.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Improper Restriction of XML External Entity Reference vulnerability in DLP Endpoint for Windows prior to 11.9.100 allows a remote attacker to cause the DLP Agent to access a local service that the attacker wouldn't usually have access to via a carefully constructed XML file, which the DLP Agent doesn't parse correctly.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Trellix | DLP Endpoint for Windows | unspecified – before 11.9.100 |
Weakness: CWE-611 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
References
- https://kcm.trellix.com/corporate/index?page=content&id=SB10386 x_refsource_CONFIRM