CVE-2022-38342

Mô tả

Tham khảo

• community.safe.com/s/article/Known-Issue-FME-Server-XXE-vulnerability-via-adding-a-repository-item · Vendor Advisory
• cycura.com/blog/safe-software-inc-fme-server-vulnerability-disclosure · Third Party Advisory

Lỗ hổng khác của fme server

• CVE-2023-35801CAO 8.1A directory traversal vulnerability in Safe Software FME Server before 2022.2.5 allows an attacker to bypass validation when editing a netwo…
• CVE-2022-38340CAO 7.2Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a Path Traversal vulnerability via the component fmedata…
• CVE-2022-38339TRUNG BÌNH 6.1Safe Software FME Server v2021.2.5, v2022.0.0.2 and below contains a cross-site scripting (XSS) vulnerability which allows attackers to exec…
• CVE-2022-38341CAO 7.1Safe Software FME Server v2021.2.5 and below does not employ server-side validation.
• CVE-2020-22790TRUNG BÌNH 5.4Authenticated Stored XSS in FME Server versions 2019.2 and 2020.0 Beta allows a remote attacker to execute codeby injecting arbitrary web sc…