7.5

CVE-2014-2056

PHPDocX, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
OwncloudOwncloud Server Updatea Version <= 5.0.14
OwncloudOwncloud Server Version5.0.0
OwncloudOwncloud Server Version5.0.1
OwncloudOwncloud Server Version5.0.2
OwncloudOwncloud Server Version5.0.3
OwncloudOwncloud Server Version5.0.4
OwncloudOwncloud Server Version5.0.5
OwncloudOwncloud Server Version5.0.6
OwncloudOwncloud Server Version5.0.7
OwncloudOwncloud Server Version5.0.8
OwncloudOwncloud Server Version5.0.9
OwncloudOwncloud Server Version5.0.10
OwncloudOwncloud Server Version5.0.11
OwncloudOwncloud Server Version5.0.12
OwncloudOwncloud Server Version5.0.13
OwncloudOwncloud Server Version5.0.14
PhpdocxPhpdocx Version-
OwncloudOwncloud Server Version6.0.0
OwncloudOwncloud Server Version6.0.1
PhpdocxPhpdocx Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.54% 0.648
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P