CVE-2014-5238

XML external entity (XXE) vulnerability in Open-Xchange (OX) AppSuite before 7.4.2-rev11 and 7.6.x before 7.6.0-rev9 allows remote attackers to read arbitrary…

published January 14, 2020

CVSS
—
EPSS
2%
Percentile
79.9
In the wild
Unconfirmed
What it is

XML external entity (XXE) vulnerability in Open-Xchange (OX) AppSuite before 7.4.2-rev11 and 7.6.x before 7.6.0-rev9 allows remote attackers to read arbitrary files and possibly other unspecified impact via a crafted OpenDocument Text document.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01931 · 79.9th percentile
Published
2020-01-14T16:00Z
EPSS history
Timeline
  • 14 JAN 16:00Z
    XML external entity (XXE) vulnerability in Open-Xchange (OX) AppSuite before 7.4.2-rev11 and 7.6.x before 7.6.0-rev9 allows remote attackers to read arbitrary…
    cvelistv5