CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-1704

Due to an XML external entity reference, the software parses XML in the backup/restore functionality without XML security flags, which may lead to a XXE attack while restoring the backup.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 10.4%

CVSS Severity

CVSS v3 Score 7.6

References

Products affected by CVE-2022-1704

Inductiveautomation » Ignition » Version: 7.9.0

cpe:2.3:a:inductiveautomation:ignition:7.9.0
Inductiveautomation » Ignition » Version: 7.9.1

cpe:2.3:a:inductiveautomation:ignition:7.9.1
Inductiveautomation » Ignition » Version: 7.9.10

cpe:2.3:a:inductiveautomation:ignition:7.9.10
Inductiveautomation » Ignition » Version: 7.9.11

cpe:2.3:a:inductiveautomation:ignition:7.9.11
Inductiveautomation » Ignition » Version: 7.9.12

cpe:2.3:a:inductiveautomation:ignition:7.9.12
Inductiveautomation » Ignition » Version: 7.9.13

cpe:2.3:a:inductiveautomation:ignition:7.9.13
Inductiveautomation » Ignition » Version: 7.9.14

cpe:2.3:a:inductiveautomation:ignition:7.9.14
Inductiveautomation » Ignition » Version: 7.9.15

cpe:2.3:a:inductiveautomation:ignition:7.9.15
Inductiveautomation » Ignition » Version: 7.9.16

cpe:2.3:a:inductiveautomation:ignition:7.9.16
Inductiveautomation » Ignition » Version: 7.9.17

cpe:2.3:a:inductiveautomation:ignition:7.9.17
Inductiveautomation » Ignition » Version: 7.9.18

cpe:2.3:a:inductiveautomation:ignition:7.9.18
Inductiveautomation » Ignition » Version: 7.9.19

cpe:2.3:a:inductiveautomation:ignition:7.9.19
Inductiveautomation » Ignition » Version: 7.9.2

cpe:2.3:a:inductiveautomation:ignition:7.9.2
Inductiveautomation » Ignition » Version: 7.9.20

cpe:2.3:a:inductiveautomation:ignition:7.9.20
Inductiveautomation » Ignition » Version: 7.9.3

cpe:2.3:a:inductiveautomation:ignition:7.9.3
Inductiveautomation » Ignition » Version: 7.9.4

cpe:2.3:a:inductiveautomation:ignition:7.9.4
Inductiveautomation » Ignition » Version: 7.9.5

cpe:2.3:a:inductiveautomation:ignition:7.9.5
Inductiveautomation » Ignition » Version: 7.9.6

cpe:2.3:a:inductiveautomation:ignition:7.9.6
Inductiveautomation » Ignition » Version: 7.9.7

cpe:2.3:a:inductiveautomation:ignition:7.9.7
Inductiveautomation » Ignition » Version: 7.9.8

cpe:2.3:a:inductiveautomation:ignition:7.9.8
Inductiveautomation » Ignition » Version: 7.9.9

cpe:2.3:a:inductiveautomation:ignition:7.9.9
Inductiveautomation » Ignition » Version: 8.1.0

cpe:2.3:a:inductiveautomation:ignition:8.1.0
Inductiveautomation » Ignition » Version: 8.1.1

cpe:2.3:a:inductiveautomation:ignition:8.1.1
Inductiveautomation » Ignition » Version: 8.1.2

cpe:2.3:a:inductiveautomation:ignition:8.1.2
Inductiveautomation » Ignition » Version: 8.1.3

cpe:2.3:a:inductiveautomation:ignition:8.1.3
Inductiveautomation » Ignition » Version: 8.1.4

cpe:2.3:a:inductiveautomation:ignition:8.1.4
Inductiveautomation » Ignition » Version: 8.1.5

cpe:2.3:a:inductiveautomation:ignition:8.1.5
Inductiveautomation » Ignition » Version: 8.1.6

cpe:2.3:a:inductiveautomation:ignition:8.1.6
Inductiveautomation » Ignition » Version: 8.1.7

cpe:2.3:a:inductiveautomation:ignition:8.1.7

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-1704

Products

Pricing

Contact Us