PRIOn knowledge basePRION:CVE-2014-5392Xxe
7.3 High
AI Score
Confidence
Low
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:N/A:P
0.005 Low
EPSS
Percentile
75.3%
XML External Entity (XXE) vulnerability in JobScheduler before 1.6.4246 and 7.x before 1.7.4241 allows remote attackers to cause a denial of service and read arbitrary files or directories via a request containing an XML external entity declaration in conjunction with an entity reference.
| CPE | Name | Operator | Version |
|---|---|---|---|
| jobscheduler | eq | 1.6.4043 | |
| jobscheduler | eq | 1.7.4189 | |
| jobscheduler | eq | 1.6.4014 | |
| jobscheduler | eq | 1.7.4177 | |
| jobscheduler | le | 1.6.4131 |
Related
7.3 High
AI Score
Confidence
Low
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:N/A:P
0.005 Low
EPSS
Percentile
75.3%