← Back to CVE List

Vulnerability Intelligence Report

CVE-2022-25356

Alt-N MDaemon Security Gateway through 8.5.0 allows SecurityGateway.dll?view=login XML Injection.

Nuclei Template

CVSS Base Score

5.3

MEDIUM

Exploitability:3.9

Impact Score:1.5

EPSS Probability:5.88%

Executive Threat Verdict

Evaluating...

Evaluating Threat Landscape...

Assessing known weaponization, exploitation telemetry, and federal advisories.

Attack Surface

—

Authentication

—

Weaponization

—

SSVC Action

—

Weaknesses (CWE)

CWE-91 ↗CWE-91 XML Injection (aka Blind XPath Injection)

Affected Products & Versions

Vendor	Product	Affected Versions
altn	securitygateway	all

Exploitation & Remediation

References & Technical Advisories

NVD Listing ↗ MITRE Listing ↗ GitHub Advisory ↗

No reference links found.

Threat Intelligence Signals

Nuclei Template

SCANNER AVAILABLE

EPSS Score

5.879%

GitHub Advisory

GHSA-hp7c-9qj5-xcrq ↗

CVSS Vector Breakdown

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality

Integrity

Availability

Identity & Timeline

Status	PUBLISHED
Assigning Authority	MITRE Corporation · N/A · USA
Reserved	2022-02-18T00:00:00
Published	2022-04-05T01:58:35
Last Updated	2025-09-05T17:07:36

MITRE ATT&CK Mapping

Tactics

Techniques

CVE-2022-25356

—

Public Weaponization & Exploit Code Exploit-DB Catalog

Weaknesses (CWE)

Affected Products & Versions

Exploitation & Remediation

References & Technical Advisories

Threat Intelligence Signals

CVSS Vector Breakdown

Identity & Timeline

SSVC Prioritization

MITRE ATT&CK Mapping

CVE-2022-25356

—

Public Weaponization & Exploit Code Exploit-DB Catalog

Weaknesses (CWE)

Affected Products & Versions

Exploitation & Remediation

References & Technical Advisories

Threat Intelligence Signals

CVSS Vector Breakdown

Identity & Timeline

SSVC Prioritization

MITRE ATT&CK Mapping

Community Chatter & Buzz

Related Intelligence

SHARE INTELLIGENCE WIRE