Is CVE-2022-45588 actively exploited?

No active exploitation of CVE-2022-45588 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2022-45588 be exploited remotely?

No. CVE-2022-45588 requires local access to exploit.

What is the CVSS score of CVE-2022-45588?

CVE-2022-45588 has a CVSS score of 7.8 (HIGH).

HOME VULNERABILITIESCVE-2022-45588

HIGH

CVE-2022-45588

CWE-611Published: February 3, 2023· Updated: Jul 9, 2026

7.8

CVSS v3.1

Official Description

All versions before R2022-09 of Talend's Remote Engine Gen 2 are potentially vulnerable to XML External Entity (XXE) type of attacks. Users should download the R2022-09 release or later and use it in place of the previous version. Talend Remote Engine Gen 1 and Talend Cloud Engine for Design are not impacted. This XXE vulnerability could only be exploited by someone with the appropriate rights to edit pipelines on the Talend platform. It could not be triggered remotely or by other user input.

NVD Source

Technical Analysis

CVE-2022-45588 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.8.