CVE-2022-2414: Dogtagpki

High severity, CVSS 7.5. EPSS: 86% chance of exploitation in the next 30 days.

Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests.

Affected products

• Dogtagpki Dogtagpki: version 10.5.18 only; version 10.7.4 only; version 10.8.3 only; version 10.11.2 only; version 10.12.4 only; version 11.0.5 only; …

Published 2022-07-29. Last modified 2026-06-17.