Signiant - Manager+Agents XML External Entity (XXE)

published 2022-03-09 4y ago modified 2026-06-17 4mo ago also EUVD-2022-27938

cvss: 6.8; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 1.1%; EPSS 1.1% chance of exploitation in 30 days, percentile 64%
public exploits: 0; none known

Signiant - Manager+Agents XML External Entity (XXE) - Extract internal files of the affected machine An attacker can read all the system files, the product is running with root on Linux systems and nt/authority on windows systems, which allows him to access and extract any file on the systems, such as passwd, shadow, hosts and so on. By gaining access to these files, attackers can steal sensitive information from the victims machine.

Patch / fix

fixed in 1

signiant manager+agents 13.5

Is CVE-2022-22795 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Exploit prediction

1.06% chance of exploitation in the next 30 days, higher than 64% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by	version	score	vector
CNA	3.1	6.8	CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
NVD	3.1	9.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
NVD	2.0	6.4	AV:N/AC:L/Au:N/C:P/I:N/A:P

Affected products

Signiant Signiant

Classification

Weakness

CWE-611 Improper Restriction of XML External Entity Reference

References

gov.il /en/departments/faq/cve_advisories
third-party-advisory

Sources

CVE List CVE-2022-22795
NVD CVE-2022-22795

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.