Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2014-3004
HistoryJun 11, 2014 - 2:55 p.m.

CVE-2014-3004

2014-06-1114:55:07
CWE-611
[email protected]
web.nvd.nist.gov
59
2
security
xerces sax parser
castor
cve-2014-3004
xml external entity
xxe
nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

8.9 High

AI Score

Confidence

High

0.016 Low

EPSS

Percentile

87.6%

JSON

The default configuration for the Xerces SAX Parser in Castor before 1.3.3 allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XML document.

Affected configurations

NVD
Node
castor_projectcastorRange≤1.3.2
OR
castor_projectcastorMatch1.3
OR
castor_projectcastorMatch1.3.1
Node
opensuseopensuseMatch13.1
OR
opensuse_projectopensuseMatch12.3

Social References

More

Related

packetstorm 2
ibm 11
cvelist 1
github 1
nessus 3
prion 1
nvd 2
openvas 3
mageia 1
osv 1
symantec 1
fedora 2
ubuntucve 1
cve 1
oracle 1
packetstorm
packetstorm
Castor Library XXE Disclosure
2014-05-30 00:00:00
Cisco WebEx Meetings Server XML Injection
2018-11-05 00:00:00
ibm
ibm
Security Bulletin: XML External Entity Processing in Castor might affect WebSphere Lombardi Edition (CVE-2014-3004)
2018-06-15 07:02:08
Security Bulletin: XML External Entity Injection vulnerability affect IBM Business Automation Workflow and IBM Business Process Manager (BPM) - CVE-2014-3004
2022-11-02 21:46:48
Security Bulletin: TADDM is vulnerable to a denial of service due to vulnerability in Castor Library
2023-06-14 14:02:41
cvelist
cvelist
CVE-2014-3004
2014-06-11 14:00:00
github
github
Improper Restriction of XML External Entity Reference in Castor
2022-05-13 01:05:37
nessus
nessus
Fedora 21 : castor-1.3.3-1.fc21 (2014-16446)
2014-12-15 00:00:00
Fedora 20 : castor-1.3.3-1.fc20 (2014-16346)
2014-12-15 00:00:00
openSUSE Security Update : castor (openSUSE-SU-2014:0822-1)
2014-06-23 00:00:00
prion
prion
Xxe
2014-06-11 14:55:00
nvd
nvd
CVE-2014-3004
2014-06-11 14:55:07
CVE-2018-18895
2019-01-30 15:29:05
openvas
openvas
Fedora Update for castor FEDORA-2014-16346
2014-12-15 00:00:00
Fedora Update for castor FEDORA-2014-16446
2015-01-05 00:00:00
Mageia: Security Advisory (MGASA-2014-0556)
2022-01-28 00:00:00
mageia
mageia
Updated castor packages fix CVE-2014-3004
2014-12-31 15:28:04
osv
osv
Improper Restriction of XML External Entity Reference in Castor
2022-05-13 01:05:37
symantec
symantec
Castor Library CVE-2014-3004 XML External Entity Information Disclosure Vulnerability
2014-05-27 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: castor-1.3.3-1.fc21
2014-12-15 04:35:34
[SECURITY] Fedora 20 Update: castor-1.3.3-1.fc20
2014-12-15 04:35:59
ubuntucve
ubuntucve
CVE-2014-3004
2014-06-11 00:00:00
cve
cve
CVE-2018-18895
2019-02-12 18:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2020
2020-01-14 00:00:00

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

8.9 High

AI Score

Confidence

High

0.016 Low

EPSS

Percentile

87.6%

JSON
Related for CVE-2014-3004
packetstorm2ibm11cvelist1github1nessus3prion1nvd2openvas3mageia1osv1symantec1fedora2ubuntucve1cve1oracle1