NVD

Id
36073  
Name
CVE-2014-9360  
Description
XML external entity (XXE) vulnerability in Scalix Web Access 11.4.6.12377 and 12.2.0.14697 allows remote attackers to read arbitrary files and trigger requests to intranet servers via a crafted request.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-12-10  
Modified Date
2014-12-11  
Seq
2014-9360  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
184433 36073 CVE-2014-9360 20141031 SEC Consult SA-20141031-0 :: XML External Entity Injection (XXE) and Reflected XSS in Scalix Web Access  View
184434 36073 CVE-2014-9360 20141031 SEC Consult SA-20141031-0 :: XML External Entity Injection (XXE) and Reflected XSS in Scalix Web Access  View
184435 36073 CVE-2014-9360 https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20141031-0_Scalix_Web_Access_XXE_v10.txt  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
17077 JVNDB-2014-005952 Scalix Web Access における XML 外部エンティティの脆弱性 Scalix Web Access には、XML 外部エンティティ (XXE) の脆弱性が存在します。 CVE-2014-9360 76653 CVE-2014-9360 36073 6.4 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005952.html 2014-10-31 2014-12-15 View