CVE-2022-41221: XEE
The client in OpenText Archive Center Administration through 21.2 allows XXE attacks. Authenticated users of the OpenText Archive Center Administration client (Versions 16.2.3, 21.2, and older versions) could upload XML files to the application that it did not sufficiently validate. As a result, attackers could craft XML files that, when processed by the application, would cause a negative security impact such as data exfiltration or localized denial of service against the application instance and system of the user running it.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-41221?
CVE-2022-41221 is considered a high severity vulnerability due to its potential for XXE attacks.
What types of attacks are possible with CVE-2022-41221?
CVE-2022-41221 allows for XML External Entity (XXE) attacks, which can lead to data exposure and other security issues.
How do I fix CVE-2022-41221?
To fix CVE-2022-41221, ensure to apply appropriate updates or patches provided by OpenText for versions up to 21.2.
Who is affected by CVE-2022-41221?
CVE-2022-41221 affects authenticated users of OpenText Archive Center Administration versions 16.2.3, 21.2, and older.
What is the impact of exploiting CVE-2022-41221?
Exploiting CVE-2022-41221 could allow attackers to access sensitive data and potentially execute malicious actions on the affected system.