SSRF in N/a

CVE-2024-22219

XML External Entity (XXE) vulnerability in Terminalfour 8.0.0001 through 8.3.18 and XML JDBC versions up to 1.0.4 allows authenticated users to submit malicious XML via unspecified features which could lead to various actions such as acces…

Vulnerability class: SSRF (Server-Side Request Forgery)

EPSS: 0.005 (37.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L.

Affected products

  • N/a — versions n/a

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2024-22219?
CVE-2024-22219 is a medium-severity vulnerability in N/a, classified under Server-Side Request Forgery (SSRF). CVSS score: 6.3/10. Published 2024-08-15.
How severe is CVE-2024-22219?
Medium severity. CVSS v3 base score is 6.3 out of 10.