---
id: 7333
title: "CVE-2022-47966 SAML ShowStopper"
cve: CVE-2022-47966
source_domain: blog.viettelcybersecurity.com
source_url: "https://blog.viettelcybersecurity.com/saml-show-stopper/"
published_at: "2023-01-19T03:52:45Z"
tags: ["rce", "manageengine", "vulnerability-analysis", "saml", "cve-2022-47966", "xmlsec"]
phying_url: "https://phying.com/item/7333"
lang: en
---

# CVE-2022-47966 SAML ShowStopper

## Summary

Viettel dissects CVE-2022-47966: legacy xmlsec in ManageEngine products runs XSLT transforms during SAML signature verification, so a crafted SAMLResponse can trigger unauthenticated RCE.

## Intelligence Metadata

- **Sources:** blog.viettelcybersecurity.com
- **CVE:** CVE-2022-47966
- **Published:** 2023-01-19T03:52:45Z
- **Original:** https://blog.viettelcybersecurity.com/saml-show-stopper/
- **Phying News:** https://phying.com/item/7333