CVE-2022-2759

HighCVSS 8.6/10Last modified Jun 17, 2026

Description

Delta Electronics Delta Robot Automation Studio (DRAS) versions prior to 1.13.20 are affected by improper restrictions where the software processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output. This may allow an attacker to view sensitive documents and information on the affected host.

Metrics

CVSS 3.1 8.6/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Weakness enumeration

CWE-611

Affected software

No affected versions have been published.

Timeline

Published
Aug 31, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-275926.7An unquoted search path or element vulnerability has been reported to affect QVR Smart Client. If exploited, the vulnerability could allow lCVE-2022-275939.1An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, ThiCVE-2022-275957.8An insecure library loading vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local CVE-2022-275969.8A vulnerability has been reported to affect QNAP device running QuTS hero, QTS. If exploited, this vulnerability allows remote attackers to CVE-2022-275972.7A vulnerability has been reported to affect QNAP operating systems. If exploited, the out-of-bounds read vulnerability allows remote authentCVE-2022-275982.7A vulnerability has been reported to affect QNAP operating systems. If exploited, the out-of-bounds read vulnerability allows remote authentCVE-2022-275994.4An insertion of sensitive information into Log file vulnerability has been reported to affect product. If exploited, the vulnerability possiCVE-2022-27604.3In affected versions of Octopus Deploy it is possible to reveal the Space ID of spaces that the user does not have access to view in an erroCVE-2022-276007.5An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulCVE-2022-276078.1Bento4 1.6.0-639 has a heap-based buffer over-read in the AP4_HvccAtom class, a different issue than CVE-2018-14531.CVE-2022-276086.0Forcepoint One Endpoint prior to version 22.01 installed on Microsoft Windows is vulnerable to registry key tampering by users with AdministCVE-2022-276096.0Forcepoint One Endpoint prior to version 22.01 installed on Microsoft Windows does not provide sufficient anti-tampering protection of servi
CVE-2022-2759: High severity, CVSS 8.6 | Vulnix