Curated security research, vulnerabilities, advisories and tools for practitioners.

← back | CVE Intelligence

CVE-2022-47966

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2022-47966.

Coverage Span: 2023-01-19
Reports: 1 related reports

Associated Reports & Timeline

CVE-2022-47966 SAML ShowStopper

Viettel dissects CVE-2022-47966: legacy xmlsec in ManageEngine products runs XSLT transforms during SAML signature verification, so a crafted SAMLResponse can trigger unauthenticated RCE.