CVE-2014-4669
HP Enterprise Maps 1.00 allows remote authenticated users to read arbitrary files via a WSDL document containing an XML external entity declaration in conjunction with an entity reference within a GetQuote operation, related to an XML External Entity (XXE) issue.
- Score
- CVSS 2.0 3.5 Low
- Status
- Modified - cve@mitre.org
- Published
- 2014-06-28
- Last modified
- 2024-08-06
- Weaknesses
- CWE-200
Affected products
References
- http://packetstormsecurity.com/files/127239/HP-Enterprise-Maps-1.00-Authenticated-XXE-Injection.html
- http://seclists.org/fulldisclosure/2014/Jun/127
- http://www.securityfocus.com/bid/68200
