← Database

CVE-2022-38342

HIGH CVSS: 8.5 Published: 2022-09-13 Modified: 2026-06-17

Description

Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a XML External Entity (XXE) vulnerability which allows authenticated attackers to perform data exfiltration or Server-Side Request Forgery (SSRF) attacks.

Affected Platforms

Safe Fme Server

Weakness Type

CWE-611

References