NVD

Id
35507  
Name
CVE-2014-8474  
Description
CA Cloud Service Management (CSM) before Summer 2014 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-11-04  
Modified Date
2015-11-20  
Seq
2014-8474  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
181840 35507 CVE-2014-8474 http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20141103-01-security-notice-for-ca-cloud-service-management.aspx  View
181841 35507 CVE-2014-8474 70926  View
181842 35507 CVE-2014-8474 1031214  View
181843 35507 CVE-2014-8474 ca-cloud-cve20148474-info-disc(98537)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16377 JVNDB-2014-005252 CA Cloud Service Management における任意のファイルを読まれる脆弱性 CA Cloud Service Management (CSM) には、任意のファイルを読まれる、イントラネットのサーバに HTTP リクエストを送信される、あるいはサービス運用妨害 (メモリ消費) 状態にされる脆弱性が存在します。 CVE-2014-8474 75767 CVE-2014-8474 35507 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005252.html 2014-11-03 2014-11-07 View