NVD

Id
29088  
Name
CVE-2014-0171  
Description
XML external entity (XXE) vulnerability in StaxXMLFactoryProvider2 in Odata4j, as used in Red Hat JBoss Data Virtualization before 6.0.0 patch 4, allows remote attackers to read arbitrary files via a crafted request to a REST endpoint.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2015-01-15  
Modified Date
2015-01-15  
Seq
2014-0171  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
153758 29088 CVE-2014-0171 RHSA-2015:0034  View
153759 29088 CVE-2014-0171 https://issues.jboss.org/browse/TEIID-2911  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18803 JVNDB-2014-007678 Red Hat JBoss Data Virtualization で使用される Odata4j の StaxXMLFactoryProvider2 における XML 外部エンティティの脆弱性 Red Hat JBoss Data Virtualization で使用される Odata4j の StaxXMLFactoryProvider2 には、XML 外部エンティティ (XXE) の脆弱性が存在します。 CVE-2014-0171 67572 CVE-2014-0171 29088 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007678.html 2014-07-11 2015-01-19 View