Xxe

SOAPpy 0.12.5 allows remote attackers to read arbitrary files via a SOAP request containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

CVE-2014-3243

SOAPpy 0.12.5 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted SOAP request containing a large number of nested entity references...

Design/Logic Flaw

SOAPpy 0.12.5 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted SOAP request containing a large number of nested entity references...

UBUNTU-CVE-2014-3242

SOAPpy 0.12.5 allows remote attackers to read arbitrary files via a SOAP request containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

CVE-2014-3243

The CVE-2014-3243 issue affects SOAPpy 0.12.5, where recursion during entity expansion is not properly detected, allowing remote attackers to trigger a denial of service via crafted SOAP requests with deeply nested entity references. This is a network‑based vulnerability with memory and CPU impac...

CVE-2014-3242

SOAPpy 0.12.5 allows remote attackers to read arbitrary files via a SOAP request containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

CVE-2014-3243

SOAPpy 0.12.5 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted SOAP request containing a large number of nested entity references...

CVE-2014-3242

CVE-2014-3242 affects SOAPpy 0.12.5, where processing XML External Entities (XXE) allows remote attackers to read arbitrary files via a SOAP request containing an external entity declaration and an entity reference. The connected sources consistently describe the issue as an XXE flaw in SOAPpy 0....

CVE-2014-3243

Removed by vendor...

CVE-2014-3242

Removed by vendor...

SOAPpy <= 0.12.5 XXE Vulnerability - Active Check

SOAPpy is prone to an XML external entity XXE vulnerability SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...