CVE-2022-4245
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2022
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Codehaus-plexus: xml external entity (xxe) injection
A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
RHINT Camel-K-1.10.1
- Vendor
- Red Hat
- Product
- RHINT Camel-K-1.10.1
- Platforms
- Unknown
- Default status
unaffected- Package
- codehaus-plexus
- Package collection
- https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
No explicit version tuples; consult this entry's default status.
RHPAM 7.13.1 async
- Vendor
- Red Hat
- Product
- RHPAM 7.13.1 async
- Platforms
- Unknown
- Default status
unaffected- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
A-MQ Clients 2
- Vendor
- Red Hat
- Product
- A-MQ Clients 2
- Platforms
- Unknown
- Default status
affected- Package
- codehaus-plexus
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat A-MQ Online
- Vendor
- Red Hat
- Product
- Red Hat A-MQ Online
- Platforms
- Unknown
- Default status
affected- Package
- codehaus-plexus
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat build of Apache Camel for Spring Boot
- Vendor
- Red Hat
- Product
- Red Hat build of Apache Camel for Spring Boot
- Platforms
- Unknown
- Default status
affected- Package
- codehaus-plexus
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat build of Quarkus
- Vendor
- Red Hat
- Product
- Red Hat build of Quarkus
- Platforms
- Unknown
- Default status
affected- Package
- codehaus-plexus
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Data Grid 8
- Vendor
- Red Hat
- Product
- Red Hat Data Grid 8
- Platforms
- Unknown
- Default status
affected- Package
- codehaus-plexus
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Decision Manager 7
- Vendor
- Red Hat
- Product
- Red Hat Decision Manager 7
- Platforms
- Unknown
- Default status
unknown- Package
- codehaus-plexus
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 7
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux 7
- Platforms
- Unknown
- Default status
unknown- Package
- plexus-utils
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 8
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux 8
- Platforms
- Unknown
- Default status
unaffected- Package
- maven:3.6/plexus-utils
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 8
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux 8
- Platforms
- Unknown
- Default status
unaffected- Package
- maven:3.8/plexus-utils
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 9
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux 9
- Platforms
- Unknown
- Default status
unaffected- Package
- maven:3.8/plexus-utils
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 9
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux 9
- Platforms
- Unknown
- Default status
unaffected- Package
- plexus-utils
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Integration Camel Quarkus
- Vendor
- Red Hat
- Product
- Red Hat Integration Camel Quarkus
- Platforms
- Unknown
- Default status
affected- Package
- codehaus-plexus
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Integration Change Data Capture
- Vendor
- Red Hat
- Product
- Red Hat Integration Change Data Capture
- Platforms
- Unknown
- Default status
affected- Package
- codehaus-plexus
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Integration Service Registry
- Vendor
- Red Hat
- Product
- Red Hat Integration Service Registry
- Platforms
- Unknown
- Default status
affected- Package
- codehaus-plexus
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat JBoss A-MQ 7
- Vendor
- Red Hat
- Product
- Red Hat JBoss A-MQ 7
- Platforms
- Unknown
- Default status
affected- Package
- codehaus-plexus
- Package collection
- https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
No explicit version tuples; consult this entry's default status.
Red Hat JBoss Data Grid 7
- Vendor
- Red Hat
- Product
- Red Hat JBoss Data Grid 7
- Platforms
- Unknown
- Default status
unknown- Package
- codehaus-plexus
- Package collection
- https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
No explicit version tuples; consult this entry's default status.
Red Hat JBoss Enterprise Application Platform 6
- Vendor
- Red Hat
- Product
- Red Hat JBoss Enterprise Application Platform 6
- Platforms
- Unknown
- Default status
unknown- Package
- codehaus-plexus
- Package collection
- https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
No explicit version tuples; consult this entry's default status.
Red Hat JBoss Enterprise Application Platform 7
- Vendor
- Red Hat
- Product
- Red Hat JBoss Enterprise Application Platform 7
- Platforms
- Unknown
- Default status
unaffected- Package
- codehaus-plexus
- Package collection
- https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
No explicit version tuples; consult this entry's default status.
Red Hat JBoss Enterprise Application Platform Expansion Pack
- Vendor
- Red Hat
- Product
- Red Hat JBoss Enterprise Application Platform Expansion Pack
- Platforms
- Unknown
- Default status
unaffected- Package
- codehaus-plexus
- Package collection
- https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
No explicit version tuples; consult this entry's default status.
Red Hat JBoss Fuse 6
- Vendor
- Red Hat
- Product
- Red Hat JBoss Fuse 6
- Platforms
- Unknown
- Default status
unknown- Package
- codehaus-plexus
- Package collection
- https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
No explicit version tuples; consult this entry's default status.
Red Hat JBoss Fuse 7
- Vendor
- Red Hat
- Product
- Red Hat JBoss Fuse 7
- Platforms
- Unknown
- Default status
affected- Package
- codehaus-plexus
- Package collection
- https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
No explicit version tuples; consult this entry's default status.
Red Hat JBoss Fuse Service Works 6
- Vendor
- Red Hat
- Product
- Red Hat JBoss Fuse Service Works 6
- Platforms
- Unknown
- Default status
unknown- Package
- codehaus-plexus
- Package collection
- https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
No explicit version tuples; consult this entry's default status.
Red Hat JBoss Web Server 3
- Vendor
- Red Hat
- Product
- Red Hat JBoss Web Server 3
- Platforms
- Unknown
- Default status
unknown- Package
- codehaus-plexus
- Package collection
- https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
No explicit version tuples; consult this entry's default status.
Red Hat JBoss Web Server 5
- Vendor
- Red Hat
- Product
- Red Hat JBoss Web Server 5
- Platforms
- Unknown
- Default status
unaffected- Package
- codehaus-plexus
- Package collection
- https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift Application Runtimes
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Application Runtimes
- Platforms
- Unknown
- Default status
unaffected- Package
- codehaus-plexus
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Process Automation 7
- Vendor
- Red Hat
- Product
- Red Hat Process Automation 7
- Platforms
- Unknown
- Default status
affected- Package
- codehaus-plexus
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Single Sign-On 7
- Vendor
- Red Hat
- Product
- Red Hat Single Sign-On 7
- Platforms
- Unknown
- Default status
affected- Package
- org.codehaus.plexus-plexus-utils
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Software Collections
- Vendor
- Red Hat
- Product
- Red Hat Software Collections
- Platforms
- Unknown
- Default status
affected- Package
- rh-maven36-byte-buddy
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Software Collections
- Vendor
- Red Hat
- Product
- Red Hat Software Collections
- Platforms
- Unknown
- Default status
unaffected- Package
- rh-maven36-maven
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Software Collections
- Vendor
- Red Hat
- Product
- Red Hat Software Collections
- Platforms
- Unknown
- Default status
unaffected- Package
- rh-maven36-maven-archiver
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Software Collections
- Vendor
- Red Hat
- Product
- Red Hat Software Collections
- Platforms
- Unknown
- Default status
affected- Package
- rh-maven36-maven-assembly-plugin
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Software Collections
- Vendor
- Red Hat
- Product
- Red Hat Software Collections
- Platforms
- Unknown
- Default status
affected- Package
- rh-maven36-maven-compiler-plugin
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Software Collections
- Vendor
- Red Hat
- Product
- Red Hat Software Collections
- Platforms
- Unknown
- Default status
unaffected- Package
- rh-maven36-maven-jar-plugin
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Software Collections
- Vendor
- Red Hat
- Product
- Red Hat Software Collections
- Platforms
- Unknown
- Default status
affected- Package
- rh-maven36-maven-plugin-bundle
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Software Collections
- Vendor
- Red Hat
- Product
- Red Hat Software Collections
- Platforms
- Unknown
- Default status
unaffected- Package
- rh-maven36-maven-remote-resources-plugin
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Software Collections
- Vendor
- Red Hat
- Product
- Red Hat Software Collections
- Platforms
- Unknown
- Default status
affected- Package
- rh-maven36-maven-shade-plugin
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Software Collections
- Vendor
- Red Hat
- Product
- Red Hat Software Collections
- Platforms
- Unknown
- Default status
affected- Package
- rh-maven36-maven-source-plugin
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Software Collections
- Vendor
- Red Hat
- Product
- Red Hat Software Collections
- Platforms
- Unknown
- Default status
affected- Package
- rh-maven36-maven-surefire
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Software Collections
- Vendor
- Red Hat
- Product
- Red Hat Software Collections
- Platforms
- Unknown
- Default status
unaffected- Package
- rh-maven36-plexus-utils
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat support for Spring Boot
- Vendor
- Red Hat
- Product
- Red Hat support for Spring Boot
- Platforms
- Unknown
- Default status
affected- Package
- codehaus-plexus
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.