Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Back

CVE-2022-22795

Signiant - Manager+Agents XML External Entity (XXE)

Description

Signiant - Manager+Agents XML External Entity (XXE) - Extract internal files of the affected machine An attacker can read all the system files, the product is running with root on Linux systems and nt/authority on windows systems, which allows him to access and extract any file on the systems, such as passwd, shadow, hosts and so on. By gaining access to these files, attackers can steal sensitive information from the victims machine.

Timeline

  1. ID reserved

    By INCD

  2. · 2 months later

    Published

  3. · 3 years later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2022-22795, by who scored it
Scored byCVSSScoreVector
INCDCNA (assigner)3.1Medium6.8CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
NVDNVD · Modified3.1Critical9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
EPSS (exploitation in 30 days)
1.1% · top 35% of all CVEs (11 Nov 2026)
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.8.

Affected products

  • Signiant · Signiant

    • affected Signiant Build 78045 13.5.0
    • affected Signiant Build 79008,14.0.0
    • affected Signiant Build 79687 14.1.0
    • affected Signiant Build 79687 15.0.0

What to do

Solution: All of 13.5, 14.1, and 15.1 have an update available. The mitigation involved adding a filter that validates for external dtd.

References

References1

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2022-22795 badge
[![CVE-2022-22795](https://cveledger.app/badge/CVE-2022-22795.svg)](https://cveledger.app/cve/CVE-2022-22795)

Record last updated .