CVE-2014-0931

Multiple XML external entity (XXE) vulnerabilities in the (1) CCRC WAN Server / CM Server, (2) Perl CC/CQ integration trigger scripts, (3) CMAPI Java interface, (4) ClearCase remote client, and (5) CMI and OSLC-based ClearQuest integrations components in IBM Rational ClearCase 7.1.0.x, 7.1.1.x, 7.1.2 through 7.1.2.13, 8.0 through 8.0.0.10, and 8.0.1 through 8.0.1.3 allow remote attackers to cause a denial of service or access other servers via crafted XML data. IBM X-Force ID: 92263.

• CWE-611

• http://www-01.ibm.com/support/docview.wss?uid=swg21668868Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/92263VDB Entry, Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21668868Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/92263VDB Entry, Vendor Advisory

Published

Apr 20, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-0923IBM MessageSight 1.x before 1.1.0.0-IBM-IMA-IT01015 allows r…
• CVE-2014-0924IBM MessageSight 1.x before 1.1.0.0-IBM-IMA-IT01015 does not…
• CVE-2014-0925Open redirect vulnerability in IBM Sterling Control Center 5…
• CVE-2014-0927The ActiveMQ admin user interface in IBM Sterling B2B Integr…
• CVE-2014-0929Cross-site request forgery (CSRF) vulnerability in the Profi…
• CVE-2014-0930The ptrace system call in IBM AIX 5.3, 6.1, and 7.1, and VIO…
• CVE-2014-0932Cross-site scripting (XSS) vulnerability in IBM Sterling Ord…
• CVE-2014-0933Cross-site request forgery (CSRF) vulnerability in IBM InfoS…
• CVE-2014-0935Unspecified vulnerability in IBM Smart Analytics System 7700…
• CVE-2014-0936IBM Security AppScan Source 8.0 through 9.0, when the publis…
• CVE-2014-0940Multiple cross-site scripting (XSS) vulnerabilities in IBM T…
• CVE-2014-0941Cross-site scripting (XSS) vulnerability in webtop/eventview…