Lucene search
HistoryDec 10, 2014 - 3:59 p.m.
CVE-2014-9360
cve
2014
9360
xml
xxe
vulnerability
scalix web access
remote attackers
arbitrary files
intranet servers
nvd
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
6.8 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.3%
XML external entity (XXE) vulnerability in Scalix Web Access 11.4.6.12377 and 12.2.0.14697 allows remote attackers to read arbitrary files and trigger requests to intranet servers via a crafted request.
Affected configurations
Node
scalixweb_accessMatch11.4.6.12377
ORscalixweb_accessMatch12.2.0.14697
| CPE | Name | Operator | Version |
|---|---|---|---|
| scalix:web_access | scalix web access | eq | 11.4.6.12377 |
| scalix:web_access | scalix web access | eq | 12.2.0.14697 |
Related
nvd
nvd
CVE-2014-9360
2014-12-10 15:59:23
prion
prion
Xxe
2014-12-10 15:59:00
cvelist
cvelist
CVE-2014-9360
2014-12-10 15:00:00
openvas
openvas
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
6.8 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.3%
Related for CVE-2014-9360