Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-9487
HistoryOct 17, 2017 - 2:29 p.m.

CVE-2014-9487

2017-10-1714:29:00
CWE-611
[email protected]
web.nvd.nist.gov
4

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.007

Percentile

80.8%

JSON

The getid3 library in MediaWiki before 1.24.1, 1.23.8, 1.22.15 and 1.19.23 allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack. NOTE: Related to CVE-2014-2053.

Affected configurations

Nvd
Node
mediawikimediawikiMatch1.19
OR
mediawikimediawikiMatch1.19beta_1
OR
mediawikimediawikiMatch1.19beta_2
OR
mediawikimediawikiMatch1.19.0
OR
mediawikimediawikiMatch1.19.1
OR
mediawikimediawikiMatch1.19.2
OR
mediawikimediawikiMatch1.19.3
OR
mediawikimediawikiMatch1.19.4
OR
mediawikimediawikiMatch1.19.5
OR
mediawikimediawikiMatch1.19.6
OR
mediawikimediawikiMatch1.19.7
OR
mediawikimediawikiMatch1.19.8
OR
mediawikimediawikiMatch1.19.9
OR
mediawikimediawikiMatch1.19.10
OR
mediawikimediawikiMatch1.19.11
OR
mediawikimediawikiMatch1.19.12
OR
mediawikimediawikiMatch1.19.13
OR
mediawikimediawikiMatch1.19.14
OR
mediawikimediawikiMatch1.19.15
OR
mediawikimediawikiMatch1.19.16
OR
mediawikimediawikiMatch1.19.17
OR
mediawikimediawikiMatch1.19.18
OR
mediawikimediawikiMatch1.19.19
OR
mediawikimediawikiMatch1.19.20
OR
mediawikimediawikiMatch1.19.21
OR
mediawikimediawikiMatch1.19.22
Node
mediawikimediawikiMatch1.22.0
OR
mediawikimediawikiMatch1.22.0rc1
OR
mediawikimediawikiMatch1.22.1
OR
mediawikimediawikiMatch1.22.2
OR
mediawikimediawikiMatch1.22.3
OR
mediawikimediawikiMatch1.22.4
OR
mediawikimediawikiMatch1.22.5
OR
mediawikimediawikiMatch1.22.6
OR
mediawikimediawikiMatch1.22.7
OR
mediawikimediawikiMatch1.22.8
OR
mediawikimediawikiMatch1.22.9
OR
mediawikimediawikiMatch1.22.10
OR
mediawikimediawikiMatch1.22.11
OR
mediawikimediawikiMatch1.22.12
OR
mediawikimediawikiMatch1.22.13
OR
mediawikimediawikiMatch1.22.14
Node
mediawikimediawikiMatch1.23.0
OR
mediawikimediawikiMatch1.23.1
OR
mediawikimediawikiMatch1.23.2
OR
mediawikimediawikiMatch1.23.3
OR
mediawikimediawikiMatch1.23.4
OR
mediawikimediawikiMatch1.23.5
OR
mediawikimediawikiMatch1.23.6
OR
mediawikimediawikiMatch1.23.7
Node
mediawikimediawikiMatch1.24.0
VendorProductVersionCPE
mediawikimediawiki1.19cpe:2.3:a:mediawiki:mediawiki:1.19:*:*:*:*:*:*:*
mediawikimediawiki1.19cpe:2.3:a:mediawiki:mediawiki:1.19:beta_1:*:*:*:*:*:*
mediawikimediawiki1.19cpe:2.3:a:mediawiki:mediawiki:1.19:beta_2:*:*:*:*:*:*
mediawikimediawiki1.19.0cpe:2.3:a:mediawiki:mediawiki:1.19.0:*:*:*:*:*:*:*
mediawikimediawiki1.19.1cpe:2.3:a:mediawiki:mediawiki:1.19.1:*:*:*:*:*:*:*
mediawikimediawiki1.19.2cpe:2.3:a:mediawiki:mediawiki:1.19.2:*:*:*:*:*:*:*
mediawikimediawiki1.19.3cpe:2.3:a:mediawiki:mediawiki:1.19.3:*:*:*:*:*:*:*
mediawikimediawiki1.19.4cpe:2.3:a:mediawiki:mediawiki:1.19.4:*:*:*:*:*:*:*
mediawikimediawiki1.19.5cpe:2.3:a:mediawiki:mediawiki:1.19.5:*:*:*:*:*:*:*
mediawikimediawiki1.19.6cpe:2.3:a:mediawiki:mediawiki:1.19.6:*:*:*:*:*:*:*
Rows per page:
1-10 of 511

Related

prion 2
cvelist 2
cve 2
openvas 7
seebug 1
friendsofphp 2
ubuntucve 1
github 1
osv 3
debiancve 1
nvd 1
wpvulndb 1
owncloud 2
debian 1
nessus 4
gentoo 1
prion
prion
Xxe
2017-10-17 14:29:00
Xxe
2014-06-04 14:55:00
cvelist
cvelist
CVE-2014-9487
2017-10-17 14:00:00
CVE-2014-2053
2014-06-04 14:00:00
cve
cve
CVE-2014-9487
2017-10-17 14:29:00
CVE-2014-2053
2014-06-04 14:55:03
openvas
openvas
MediaWiki XXE Vulnerability - Linux
2017-11-09 00:00:00
MediaWiki XXE Vulnerability - Windows
2017-11-09 00:00:00
ownCloud Multiple Vulnerabilities-02 (Jul 2014)
2014-07-03 00:00:00
seebug
seebug
getID3() XML外部实体漏洞
2014-03-19 00:00:00
friendsofphp
friendsofphp
Potential XXE security issue
2014-09-14 18:13:30
Potential XXE security issue
2014-09-14 18:13:30
ubuntucve
ubuntucve
CVE-2014-2053
2014-06-04 00:00:00
github
github
getID3 is vulnerable to XML External Entity (XXE)
2022-05-17 03:06:13
osv
osv
getID3 is vulnerable to XML External Entity (XXE)
2022-05-17 03:06:13
wordpress - security update
2014-08-09 00:00:00
wordpress - security update
2014-09-17 00:00:00
debiancve
debiancve
CVE-2014-2053
2014-06-04 14:55:03
nvd
nvd
CVE-2014-2053
2014-06-04 14:55:03
wpvulndb
wpvulndb
WordPress 3.6 - 3.9.1 XXE in GetID3 Library
2014-09-16 18:19:44
owncloud
owncloud
Server: XXE in multiple third party components
2014-07-03 02:00:00
XXE in multiple third party components - ownCloud
2014-07-03 18:22:45
debian
debian
[SECURITY] [DLA 56-1] wordpress security update
2014-09-17 12:05:09
nessus
nessus
Debian DLA-56-1 : wordpress security update
2015-03-26 00:00:00
Debian DSA-3001-1 : wordpress - security update
2014-08-10 00:00:00
WordPress < 3.7.4 / 3.8.4 / 3.9.2 Multiple Vulnerabilities
2014-08-12 00:00:00
gentoo
gentoo
MediaWiki: Multiple vulnerabilities
2015-02-07 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.007

Percentile

80.8%

JSON
Related for NVD:CVE-2014-9487
prion2cvelist2cve2openvas7seebug1friendsofphp2ubuntucve1github1osv3debiancve1nvd1wpvulndb1owncloud2debian1nessus4gentoo1