CVE-2022-0265 - CVE House

Back to Database

Status published High CVE-2022-0265

Improper Restriction of XML External Entity Reference in hazelcast/hazelcast

7.3 CVSS

Vulnerability Description

Improper Restriction of XML External Entity Reference in GitHub repository hazelcast/hazelcast in 5.1-BETA-1.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-0265

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from hazelcast

View All →

CVE-2022-36437

The Connection handler in Hazelcast and Hazelcast Jet allows a...

Unknown 0

CVE-2020-26168

The LDAP authentication method in LdapLoginModule in Hazelcast IMDG Enterprise...

Critical 9.8

CVE-2016-10750

In Hazelcast before 3.11, the cluster join procedure is vulnerable...

High 8.1

Affected Vendor

hazelcast

View all reports →

Affected Software

hazelcast/hazelcast

Vulnerable Versions:

5.1-BETA-1

Timeline

Official Publish: March 3rd, 2022

Last Modified: August 2nd, 2024

Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weaknesses (CWE)

CWE-611

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

Initial Access

T1005 Data from Local System

Collection

T1040 Network Sniffing