Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveDebianCVE-2014-9487
HistoryOct 17, 2017 - 2:29 p.m.

CVE-2014-9487

2017-10-1714:29:00
CWE-611
debian
web.nvd.nist.gov
30
cve-2014-9487
mediawiki
getid3 library
xxe attack
denial of service
cve-2014-2053

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

High

EPSS

0.007

Percentile

80.8%

JSON

The getid3 library in MediaWiki before 1.24.1, 1.23.8, 1.22.15 and 1.19.23 allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack. NOTE: Related to CVE-2014-2053.

Affected configurations

Nvd
Node
mediawikimediawikiMatch1.19
OR
mediawikimediawikiMatch1.19beta_1
OR
mediawikimediawikiMatch1.19beta_2
OR
mediawikimediawikiMatch1.19.0
OR
mediawikimediawikiMatch1.19.1
OR
mediawikimediawikiMatch1.19.2
OR
mediawikimediawikiMatch1.19.3
OR
mediawikimediawikiMatch1.19.4
OR
mediawikimediawikiMatch1.19.5
OR
mediawikimediawikiMatch1.19.6
OR
mediawikimediawikiMatch1.19.7
OR
mediawikimediawikiMatch1.19.8
OR
mediawikimediawikiMatch1.19.9
OR
mediawikimediawikiMatch1.19.10
OR
mediawikimediawikiMatch1.19.11
OR
mediawikimediawikiMatch1.19.12
OR
mediawikimediawikiMatch1.19.13
OR
mediawikimediawikiMatch1.19.14
OR
mediawikimediawikiMatch1.19.15
OR
mediawikimediawikiMatch1.19.16
OR
mediawikimediawikiMatch1.19.17
OR
mediawikimediawikiMatch1.19.18
OR
mediawikimediawikiMatch1.19.19
OR
mediawikimediawikiMatch1.19.20
OR
mediawikimediawikiMatch1.19.21
OR
mediawikimediawikiMatch1.19.22
Node
mediawikimediawikiMatch1.22.0
OR
mediawikimediawikiMatch1.22.0rc1
OR
mediawikimediawikiMatch1.22.1
OR
mediawikimediawikiMatch1.22.2
OR
mediawikimediawikiMatch1.22.3
OR
mediawikimediawikiMatch1.22.4
OR
mediawikimediawikiMatch1.22.5
OR
mediawikimediawikiMatch1.22.6
OR
mediawikimediawikiMatch1.22.7
OR
mediawikimediawikiMatch1.22.8
OR
mediawikimediawikiMatch1.22.9
OR
mediawikimediawikiMatch1.22.10
OR
mediawikimediawikiMatch1.22.11
OR
mediawikimediawikiMatch1.22.12
OR
mediawikimediawikiMatch1.22.13
OR
mediawikimediawikiMatch1.22.14
Node
mediawikimediawikiMatch1.23.0
OR
mediawikimediawikiMatch1.23.1
OR
mediawikimediawikiMatch1.23.2
OR
mediawikimediawikiMatch1.23.3
OR
mediawikimediawikiMatch1.23.4
OR
mediawikimediawikiMatch1.23.5
OR
mediawikimediawikiMatch1.23.6
OR
mediawikimediawikiMatch1.23.7
Node
mediawikimediawikiMatch1.24.0
VendorProductVersionCPE
mediawikimediawiki1.19cpe:2.3:a:mediawiki:mediawiki:1.19:*:*:*:*:*:*:*
mediawikimediawiki1.19cpe:2.3:a:mediawiki:mediawiki:1.19:beta_1:*:*:*:*:*:*
mediawikimediawiki1.19cpe:2.3:a:mediawiki:mediawiki:1.19:beta_2:*:*:*:*:*:*
mediawikimediawiki1.19.0cpe:2.3:a:mediawiki:mediawiki:1.19.0:*:*:*:*:*:*:*
mediawikimediawiki1.19.1cpe:2.3:a:mediawiki:mediawiki:1.19.1:*:*:*:*:*:*:*
mediawikimediawiki1.19.2cpe:2.3:a:mediawiki:mediawiki:1.19.2:*:*:*:*:*:*:*
mediawikimediawiki1.19.3cpe:2.3:a:mediawiki:mediawiki:1.19.3:*:*:*:*:*:*:*
mediawikimediawiki1.19.4cpe:2.3:a:mediawiki:mediawiki:1.19.4:*:*:*:*:*:*:*
mediawikimediawiki1.19.5cpe:2.3:a:mediawiki:mediawiki:1.19.5:*:*:*:*:*:*:*
mediawikimediawiki1.19.6cpe:2.3:a:mediawiki:mediawiki:1.19.6:*:*:*:*:*:*:*
Rows per page:
1-10 of 511

Related

nvd 2
cvelist 2
prion 2
openvas 7
seebug 1
ubuntucve 1
github 1
friendsofphp 2
osv 3
cve 1
debiancve 1
wpvulndb 1
owncloud 2
debian 1
nessus 4
gentoo 1
nvd
nvd
CVE-2014-9487
2017-10-17 14:29:00
CVE-2014-2053
2014-06-04 14:55:03
cvelist
cvelist
CVE-2014-9487
2017-10-17 14:00:00
CVE-2014-2053
2014-06-04 14:00:00
prion
prion
Xxe
2017-10-17 14:29:00
Xxe
2014-06-04 14:55:00
openvas
openvas
MediaWiki XXE Vulnerability - Linux
2017-11-09 00:00:00
MediaWiki XXE Vulnerability - Windows
2017-11-09 00:00:00
ownCloud Multiple Vulnerabilities-02 (Jul 2014)
2014-07-03 00:00:00
seebug
seebug
getID3() XML外部实体漏洞
2014-03-19 00:00:00
ubuntucve
ubuntucve
CVE-2014-2053
2014-06-04 00:00:00
github
github
getID3 is vulnerable to XML External Entity (XXE)
2022-05-17 03:06:13
friendsofphp
friendsofphp
Potential XXE security issue
2014-09-14 18:13:30
Potential XXE security issue
2014-09-14 18:13:30
osv
osv
getID3 is vulnerable to XML External Entity (XXE)
2022-05-17 03:06:13
wordpress - security update
2014-09-17 00:00:00
wordpress - security update
2014-08-09 00:00:00
cve
cve
CVE-2014-2053
2014-06-04 14:55:03
debiancve
debiancve
CVE-2014-2053
2014-06-04 14:55:03
wpvulndb
wpvulndb
WordPress 3.6 - 3.9.1 XXE in GetID3 Library
2014-09-16 18:19:44
owncloud
owncloud
XXE in multiple third party components - ownCloud
2014-07-03 18:22:45
Server: XXE in multiple third party components
2014-07-03 02:00:00
debian
debian
[SECURITY] [DLA 56-1] wordpress security update
2014-09-17 12:05:09
nessus
nessus
Debian DLA-56-1 : wordpress security update
2015-03-26 00:00:00
Debian DSA-3001-1 : wordpress - security update
2014-08-10 00:00:00
WordPress < 3.7.4 / 3.8.4 / 3.9.2 Multiple Vulnerabilities
2014-08-12 00:00:00
gentoo
gentoo
MediaWiki: Multiple vulnerabilities
2015-02-07 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

High

EPSS

0.007

Percentile

80.8%

JSON
Related for CVE-2014-9487
nvd2cvelist2prion2openvas7seebug1ubuntucve1github1friendsofphp2osv3cve1debiancve1wpvulndb1owncloud2debian1nessus4gentoo1