CVE-2014-8474

EPSS 0.83%
Veröffentlicht 04.11.2014 20:55:04
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

CA Cloud Service Management (CSM) before Summer 2014 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ca ≫ Cloud Service Management Updatespring Version <= 2014

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.83%	0.725

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20141103-01-security-notice-for-ca-cloud-service-management.aspx

Patch

Vendor Advisory

http://www.securitytracker.com/id/1031214

http://www.securityfocus.com/bid/70926

https://exchange.xforce.ibmcloud.com/vulnerabilities/98537

https://nvd.nist.gov/vuln/detail/CVE-2014-8474

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-8474

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-8474

EUVD