Lucene search
Ubuntu.comUB:CVE-2014-2054HistoryJun 04, 2014 - 12:00 a.m.
CVE-2014-2054
2014-06-0400:00:00
ubuntu.com
ubuntu.com
16
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.005
Percentile
77.0%
PHPExcel before 1.8.0, as used in ownCloud Server before 5.0.15 and 6.0.x
before 6.0.2, does not disable external entity loading in libxml, which
allows remote attackers to read arbitrary files, cause a denial of service,
or possibly have other impact via an XML External Entity (XXE) attack.
Notes
| Author | Note |
|---|---|
| mdeslaur | owncloud packages in Ubuntu are now empty |
Related
cve
cve
CVE-2014-2054
2014-06-04 14:55:03
cvelist
cvelist
CVE-2014-2054
2014-06-04 14:00:00
prion
prion
Xxe
2014-06-04 14:55:00
seebug
seebug
PHPExcel XMLĺ¤é¨ĺŽä˝ĺ¤çćźć´
2014-03-18 00:00:00
github
github
PHPExcel vulnerable to XXE attacks through libxml
2022-05-17 04:42:46
nvd
nvd
CVE-2014-2054
2014-06-04 14:55:03
osv
osv
PHPExcel vulnerable to XXE attacks through libxml
2022-05-17 04:42:46
owncloud
owncloud
Server: XXE in multiple third party components
2014-07-03 02:00:00
XXE in multiple third party components - ownCloud
2014-07-03 18:22:45
openvas
openvas
ownCloud Multiple Vulnerabilities-02 (Jul 2014)
2014-07-03 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.005
Percentile
77.0%
Related for UB:CVE-2014-2054