exploitDog

CVE-2014-8474

Опубликовано: 04 нояб. 2014

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

CA Cloud Service Management (CSM) before Summer 2014 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Комментарий

CWE-611: Improper Restriction of XML External Entity Reference ('XXE')

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ca:cloud_service_management:*:spring:*:*:*:*:*:*

Версия до 2014 (включая)

EPSS

Процентиль: 74%

0.00831

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-r8mw-46g8-vj9j

github

больше 3 лет назад

CA Cloud Service Management (CSM) before Summer 2014 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

EPSS

Процентиль: 74%

0.00831

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other