Main
Vulnerability Database
Exploits
ID:7712 - Exploit for XML External Entity injection in Solar appScreener - CVE-2022-24449
ID:7712 - Exploit for XML External Entity injection in Solar appScreener - CVE-2022-24449
Published: May 2, 2022
Vulnerability identifier: #VU62719
Vulnerability risk: High
CVE-ID: CVE-2022-24449
CWE-ID: CWE-611
Exploitation vector: Remote access
Vulnerable software:
Solar appScreener
Solar appScreener
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to execute arbitrary code on the system.
The vulnerability exists due to insufficient validation of user-supplied XML input. A remote attacker can pass a specially crafted XML code to the affected application and execute arbitrary code on the target system.
Remediation
Install updates from vendor's website.