CVE-2014-4669

HP Enterprise Maps 1.00 allows remote authenticated users to read arbitrary files via a WSDL document containing an XML external entity declaration in conjunction with an entity reference within a GetQuote operation, related to an XML External Entity XXE issue...

CVE-2014-4669

HP Enterprise Maps 1.00 is affected by CVE-2014-4669: remote authenticated users can read arbitrary files via an XML External Entity (XXE) in a WSDL document containing an external entity declaration combined with an entity reference in the GetQuote operation. Root cause is an XXE in the XML proc...