Skip to content
COOEY

EXPOSURES › CVE-2022-22823

CVE-2022-22823

CRITICAL
DETAIL
SourceNVD · cve Published2022-01-10 CVSS9.8 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2022-22823 ↗

▸ RECOMMENDED ACTION  Critical severity — schedule patching of the affected products.

PLAYERS IMPLICATED
Siemens · vendordebian · vendorlibexpat project · vendortenable · vendordebian linux · productlibexpat · productnessus · productsinema remote connect server · product
DESCRIPTION

build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

AFFECTED FEDRAMP PRODUCTS · 2
PRODUCTSTATUS
Mendix Cloud for Government
Siemens Government Technologies
In Process
Tenable.io
Tenable Public Sector (TPS)
 Authorized