CVE-2014-0171 Security Details

CVE ID

CVE-2014-0171

CWE

NVD-CWE-Other

CVE Description

XML external entity (XXE) vulnerability in StaxXMLFactoryProvider2 in Odata4j, as used in Red Hat JBoss Data Virtualization before 6.0.0 patch 4, allows remote attackers to read arbitrary files via a crafted request to a REST endpoint.

Published

Mar 28, 2017

CVSS Score & Severity

5.0Medium

CVSS Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS Score

0.379%

Malware

malware

KEV Status

Not in KEV Catalog: No known exploits

Affected Ecosystems

affected

Source

National Vulnerability Database

References

Red Hat · Bugzilla #1085555THIRD_PARTY

issues.jboss.orgTHIRD_PARTY