CVE-2014-9360 XML external entity (XXE) vulnerability in Scalix Web Access 11.4.6.12377 and 12.2.0.14697 allows remote attackers to read arbitrary files and trigger requests to intranet servers via a crafted reques...
MediumCVSS 6.4
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
XML external entity (XXE) vulnerability in Scalix Web Access 11.4.6.12377 and 12.2.0.14697 allows remote attackers to read arbitrary files and trigger requests to intranet servers via a crafted request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| scalix web access | = 11.4.6.12377 | No fix listed |
| scalix web access | = 12.2.0.14697 | No fix listed |