VULNERABILITY INTELLIGENCE

CVE-2022-38342

CVSS score8.5 HIGH

EPSS probability0.60%

CISA KEVNot currently listed

Published2022-09-13

Last modified2026-06-17

Description

Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a XML External Entity (XXE) vulnerability which allows authenticated attackers to perform data exfiltration or Server-Side Request Forgery (SSRF) attacks.