CVE-2022-45194 LOW

CVE-2022-45194

Vendor N/A
Product n/a
Published November 11, 2022
Last update May 1, 2025
View on NVD All CVEs

CVSS base score

3.8/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AC:L/AV:A/A:N/C:L/I:N/PR:N/S:C/UI:R

What the vulnerability does

01Description

CBRN-Analysis before 22 allows XXE attacks via am mws XML document, leading to NTLMv2-SSP hash disclosure.

Key dates

02Disclosure timeline

November 11, 2022 CVE published
May 1, 2025 Record updated