{"title": "CVE-2014-3087", "reporter": "NVD", "published": "2014-08-17T19:55:06", "cpe": ["cpe:/a:ibm:websphere_application_server:7.2::lombardi", "cpe:/a:ibm:business_process_manager:8.5.5.0", "cpe:/a:ibm:business_process_manager:7.5.1.0", "cpe:/a:ibm:business_process_manager:8.0.1.2", "cpe:/a:ibm:business_process_manager:8.5.0.0", "cpe:/a:ibm:business_process_manager:7.5.0.1", "cpe:/a:ibm:business_process_manager:7.5.0.0", "cpe:/a:ibm:business_process_manager:7.5.1.2", "cpe:/a:ibm:business_process_manager:8.0.1.0", "cpe:/a:ibm:business_process_manager:8.0.1.1", "cpe:/a:ibm:business_process_manager:7.5.1.1", "cpe:/a:ibm:business_process_manager:8.5.0.1", "cpe:/a:ibm:business_process_manager:8.0.0.0"], "cvelist": ["CVE-2014-3087"], "viewCount": 1, "objectVersion": "1.3", "type": "cve", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3087", "bulletinFamily": "NVD", "hashmap": [{"hash": "6d3f4796275bb54c21a33b82f399cc6d", "key": "assessment"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "5630c491ec5c701a38872e554b7cb2d7", "key": "cpe"}, {"hash": "78ef273d5c41fad12639db245a95d9f4", "key": "cvelist"}, {"hash": "d51ef32ed9f96cdaef2754a447c9af65", "key": "cvss"}, {"hash": "0303cb1d60063b07c18f2258c7b3f8a6", "key": "description"}, {"hash": "25952bb72e38cde4c5d0a6cd1845bb67", "key": "href"}, {"hash": "41cf7606b3dd28d13fed344ea643ef9c", "key": "modified"}, {"hash": "3bb6bc10aade6f318e34c7917a8bdbf2", "key": "published"}, {"hash": "da088d74db26143a7d2e3d440a3205fc", "key": "references"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "scanner"}, {"hash": "5f1676e93a925764b882ea91384036ec", "key": "title"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}], "history": [{"bulletin": {"reporter": "NVD", "published": "2014-08-17T19:55:06", "cvelist": ["CVE-2014-3087"], "title": "CVE-2014-3087", "objectVersion": "1.2", "description": "callService.do in IBM Business Process Manager (BPM) 7.5 through 8.5.5 and WebSphere Lombardi Edition 7.2 through 7.2.0.5 allows remote authenticated users to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.", "type": "cve", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3087", "bulletinFamily": "NVD", "id": "CVE-2014-3087", "history": [], "scanner": [], "enchantments": {}, "modified": "2017-01-06T21:59:52", "hash": "ccce22d023374b7744fffd1c92b09003f59f68c5578a65ba36070ee60661f28e", "cvss": {"score": 4.0, "vector": "AV:NETWORK/AC:LOW/Au:SINGLE_INSTANCE/C:PARTIAL/I:NONE/A:NONE/"}, "viewCount": 0, "edition": 2, "cpe": ["cpe:/a:ibm:websphere_application_server:7.2::lombardi", "cpe:/a:ibm:business_process_manager:8.5.5.0", "cpe:/a:ibm:business_process_manager:7.5.1.0", "cpe:/a:ibm:business_process_manager:8.0.1.2", "cpe:/a:ibm:business_process_manager:8.5.0.0", "cpe:/a:ibm:business_process_manager:7.5.0.1", "cpe:/a:ibm:business_process_manager:7.5.0.0", "cpe:/a:ibm:business_process_manager:7.5.1.2", "cpe:/a:ibm:business_process_manager:8.0.1.0", "cpe:/a:ibm:business_process_manager:8.0.1.1", "cpe:/a:ibm:business_process_manager:7.5.1.1", "cpe:/a:ibm:business_process_manager:8.5.0.1", "cpe:/a:ibm:business_process_manager:8.0.0.0"], "references": ["http://www.securityfocus.com/bid/69264", "http://www-01.ibm.com/support/docview.wss?uid=swg21679726", "http://xforce.iss.net/xforce/xfdb/94112", "http://secunia.com/advisories/60757", "http://secunia.com/advisories/60755", "http://secunia.com/advisories/60752", "http://www-01.ibm.com/support/docview.wss?uid=swg1JR50616"], "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "scanner"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "0303cb1d60063b07c18f2258c7b3f8a6", "key": "description"}, {"hash": "78ef273d5c41fad12639db245a95d9f4", "key": "cvelist"}, {"hash": "d51ef32ed9f96cdaef2754a447c9af65", "key": "cvss"}, {"hash": "5630c491ec5c701a38872e554b7cb2d7", "key": "cpe"}, {"hash": "6d3f4796275bb54c21a33b82f399cc6d", "key": "assessment"}, {"hash": "5f1676e93a925764b882ea91384036ec", "key": "title"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "3bb6bc10aade6f318e34c7917a8bdbf2", "key": "published"}, {"hash": "ef3f08174aebf032dff8c5a79e6f2f61", "key": "modified"}, {"hash": "25952bb72e38cde4c5d0a6cd1845bb67", "key": "href"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "f6b8fc8ae2771f0043a34b483de618f0", "key": "references"}], "lastseen": "2017-04-18T15:54:49", "assessment": {"name": "", "href": "", "system": ""}}, "differentElements": ["references", "modified"], "edition": 2, "lastseen": "2017-04-18T15:54:49"}, {"bulletin": {"reporter": "NVD", "published": "2014-08-17T19:55:06", "cvelist": ["CVE-2014-3087"], "title": "CVE-2014-3087", "objectVersion": "1.2", "type": "cve", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3087", "bulletinFamily": "NVD", "id": "CVE-2014-3087", "history": [], "scanner": [], "cpe": ["cpe:/a:ibm:websphere_application_server:7.2::lombardi", "cpe:/a:ibm:business_process_manager:8.5.5.0", "cpe:/a:ibm:business_process_manager:7.5.1.0", "cpe:/a:ibm:business_process_manager:8.0.1.2", "cpe:/a:ibm:business_process_manager:8.5.0.0", "cpe:/a:ibm:business_process_manager:7.5.0.1", "cpe:/a:ibm:business_process_manager:7.5.0.0", "cpe:/a:ibm:business_process_manager:7.5.1.2", "cpe:/a:ibm:business_process_manager:8.0.1.0", "cpe:/a:ibm:business_process_manager:8.0.1.1", "cpe:/a:ibm:business_process_manager:7.5.1.1", "cpe:/a:ibm:business_process_manager:8.5.0.1", "cpe:/a:ibm:business_process_manager:8.0.0.0"], "modified": "2014-08-28T12:56:09", "hash": "0a81fcc330ff21df7e6ad3519804225823c936a9c1acdaee0d0cb1f2c5c1adc4", "cvss": {"score": 4.0, "vector": "AV:NETWORK/AC:LOW/Au:SINGLE_INSTANCE/C:PARTIAL/I:NONE/A:NONE/"}, "viewCount": 0, "edition": 1, "assessment": {"name": "", "href": "", "system": ""}, "references": ["http://www-01.ibm.com/support/docview.wss?uid=swg21679726", "http://xforce.iss.net/xforce/xfdb/94112", "http://www-01.ibm.com/support/docview.wss?uid=swg1JR50616"], "hashmap": [{"hash": "e50ee47ce5f0967cb2ea3ccffbd7c3c0", "key": "references"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "scanner"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "0303cb1d60063b07c18f2258c7b3f8a6", "key": "description"}, {"hash": "78ef273d5c41fad12639db245a95d9f4", "key": "cvelist"}, {"hash": "56765472680401499c79732468ba4340", "key": "objectVersion"}, {"hash": "d51ef32ed9f96cdaef2754a447c9af65", "key": "cvss"}, {"hash": "5630c491ec5c701a38872e554b7cb2d7", "key": "cpe"}, {"hash": "6d3f4796275bb54c21a33b82f399cc6d", "key": "assessment"}, {"hash": "3d92406b5af6bd939f09c7dc7a0e90cd", "key": "modified"}, {"hash": "5f1676e93a925764b882ea91384036ec", "key": "title"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "3bb6bc10aade6f318e34c7917a8bdbf2", "key": "published"}, {"hash": "25952bb72e38cde4c5d0a6cd1845bb67", "key": "href"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}], "lastseen": "2016-09-03T20:22:15", "description": "callService.do in IBM Business Process Manager (BPM) 7.5 through 8.5.5 and WebSphere Lombardi Edition 7.2 through 7.2.0.5 allows remote authenticated users to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue."}, "differentElements": ["references", "modified"], "edition": 1, "lastseen": "2016-09-03T20:22:15"}], "scanner": [], "cvss": {"score": 4.0, "vector": "AV:NETWORK/AC:LOW/Au:SINGLE_INSTANCE/C:PARTIAL/I:NONE/A:NONE/"}, "modified": "2017-08-28T21:34:38", "hash": "66a2ceeb07c5c09cd108b374b45e6a4e7395feaf670689b037c73c15a85979ef", "enchantments": {"score": {"vector": "NONE", "value": 5.0}, "dependencies": {"references": [], "modified": "2017-08-29T10:48:14"}, "vulnersScore": 5.0}, "edition": 3, "description": "callService.do in IBM Business Process Manager (BPM) 7.5 through 8.5.5 and WebSphere Lombardi Edition 7.2 through 7.2.0.5 allows remote authenticated users to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.", "references": ["http://www.securityfocus.com/bid/69264", "http://www-01.ibm.com/support/docview.wss?uid=swg21679726", "https://exchange.xforce.ibmcloud.com/vulnerabilities/94112", "http://secunia.com/advisories/60757", "http://secunia.com/advisories/60755", "http://secunia.com/advisories/60752", "http://www-01.ibm.com/support/docview.wss?uid=swg1JR50616"], "id": "CVE-2014-3087", "lastseen": "2017-08-29T10:48:14", "assessment": {"name": "", "href": "", "system": ""}}

{}