Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistMitreCVELIST:CVE-2014-3004
HistoryJun 11, 2014 - 2:00 p.m.

CVE-2014-3004

2014-06-1114:00:00
mitre
www.cve.org
5

AI Score

8.5

Confidence

High

EPSS

0.016

Percentile

87.6%

JSON

The default configuration for the Xerces SAX Parser in Castor before 1.3.3 allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XML document.

Related

ibm 11
packetstorm 2
github 1
nessus 3
prion 1
nvd 2
cve 2
fedora 2
ubuntucve 1
symantec 1
exploitdb 1
mageia 1
openvas 3
osv 1
oracle 1
ibm
ibm
Security Bulletin: XML External Entity Processing in Castor might affect WebSphere Lombardi Edition (CVE-2014-3004)
2018-06-15 07:02:08
Security Bulletin: Vulnerability in Castor library affects IBM Cúram(CVE-2014-3004)
2018-06-17 13:05:37
Security Bulletin: XML External Entity Injection vulnerability affect IBM Business Automation Workflow and IBM Business Process Manager (BPM) - CVE-2014-3004
2022-11-02 21:46:48
packetstorm
packetstorm
Castor Library XXE Disclosure
2014-05-30 00:00:00
Cisco WebEx Meetings Server XML Injection
2018-11-05 00:00:00
github
github
Improper Restriction of XML External Entity Reference in Castor
2022-05-13 01:05:37
nessus
nessus
Fedora 21 : castor-1.3.3-1.fc21 (2014-16446)
2014-12-15 00:00:00
Fedora 20 : castor-1.3.3-1.fc20 (2014-16346)
2014-12-15 00:00:00
openSUSE Security Update : castor (openSUSE-SU-2014:0822-1)
2014-06-23 00:00:00
prion
prion
Xxe
2014-06-11 14:55:00
nvd
nvd
CVE-2014-3004
2014-06-11 14:55:07
CVE-2018-18895
2019-01-30 15:29:05
cve
cve
CVE-2014-3004
2014-06-11 14:55:07
CVE-2018-18895
2019-02-12 18:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: castor-1.3.3-1.fc20
2014-12-15 04:35:59
[SECURITY] Fedora 21 Update: castor-1.3.3-1.fc21
2014-12-15 04:35:34
ubuntucve
ubuntucve
CVE-2014-3004
2014-06-11 00:00:00
symantec
symantec
Castor Library CVE-2014-3004 XML External Entity Information Disclosure Vulnerability
2014-05-27 00:00:00
exploitdb
exploitdb
Castor Library - XML External Entity Information Disclosure
2014-05-27 00:00:00
mageia
mageia
Updated castor packages fix CVE-2014-3004
2014-12-31 15:28:04
openvas
openvas
Fedora Update for castor FEDORA-2014-16446
2015-01-05 00:00:00
Fedora Update for castor FEDORA-2014-16346
2014-12-15 00:00:00
Mageia: Security Advisory (MGASA-2014-0556)
2022-01-28 00:00:00
osv
osv
Improper Restriction of XML External Entity Reference in Castor
2022-05-13 01:05:37
oracle
oracle
Oracle Critical Patch Update Advisory - January 2020
2020-01-14 00:00:00

AI Score

8.5

Confidence

High

EPSS

0.016

Percentile

87.6%

JSON
Related for CVELIST:CVE-2014-3004
ibm11packetstorm2github1nessus3prion1nvd2cve2fedora2ubuntucve1symantec1exploitdb1mageia1openvas3osv1oracle1