CVE-2014-8474
CA Cloud Service Management (CSM) before Summer 2014 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
- Score
- CVSS 2.0 7.5 High
- Status
- Modified - cve@mitre.org
- Published
- 2014-11-04
- Last modified
- 2024-08-06
Affected products
References
- http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20141103-01-secur…
- http://www.securityfocus.com/bid/70926
- http://www.securitytracker.com/id/1031214
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98537
