exploitDog

CVE-2014-5214

Опубликовано: 23 дек. 2014

Источник: nvd

CVSS2: 4

EPSS Низкий

Описание

nps/servlet/webacc in iManager in the Administration Console server in NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allows remote authenticated novlwww users to read arbitrary files via a query parameter containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Комментарий

CWE-611: Improper Restriction of XML External Entity Reference ('XXE')

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microfocus:access_manager:4.0:*:*:*:*:*:*:*

cpe:2.3:a:microfocus:access_manager:4.0.1:*:*:*:*:*:*:*

EPSS

Процентиль: 65%

0.005

Низкий

4 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-2rcg-mhmv-j368

github

больше 3 лет назад

nps/servlet/webacc in iManager in the Administration Console server in NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allows remote authenticated novlwww users to read arbitrary files via a query parameter containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

EPSS

Процентиль: 65%

0.005

Низкий

4 Medium

CVSS2

Дефекты

NVD-CWE-Other