VULNERABILITY INTELLIGENCE

CVE-2022-24449

CVSS score9.8 CRITICAL

EPSS probability1.88%

CISA KEVNot currently listed

Published2022-04-28

Last modified2026-06-17

Description

Solar appScreener through 3.10.4, when a valid license is not present, allows XXE and SSRF attacks via a crafted XML document.