CVE-2014-6302
Last modified
CVE-2014-6302 is a vulnerability of currently unknown severity. The Monitoring Administration pages in PNMsoft Sequence Kinetics before 7.7 allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.. EPSS estimates a 1.26% chance of exploitation in the next 30 days.
Description
The Monitoring Administration pages in PNMsoft Sequence Kinetics before 7.7 allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Pnmsoft | Sequence Kinetics | <= 7.5 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2014-6302?
How severe is CVE-2014-6302?
How do I fix CVE-2014-6302?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2014
- CVE-2014-6296Cross-site scripting (XSS) vulnerability in the WEC Map (wec…
- CVE-2014-6297Cross-site scripting (XSS) vulnerability in the mm_forum ext…
- CVE-2014-6298Unrestricted file upload vulnerability in the mm_forum exten…
- CVE-2014-6299Cross-site request forgery (CSRF) vulnerability in the mm_fo…
- CVE-2014-6300Cross-site scripting (XSS) vulnerability in the micro histor…
- CVE-2014-6301Multiple cross-site scripting (XSS) vulnerabilities in the t…
- CVE-2014-6303The Monitoring Administration pages in PNMsoft Sequence Kine…
- CVE-2014-6304The Form Controls CSS file in PNMsoft Sequence Kinetics befo…
- CVE-2014-6308Directory traversal vulnerability in OSClass before 3.4.2 al…
- CVE-2014-6309The HTTP and WebSocket engine components in the server in Ka…7.5
- CVE-2014-6310Buffer overflow in CHICKEN 4.9.0 and 4.9.0.1 may allow remot…9.8
- CVE-2014-6311generate_doygen.pl in ace before 6.2.7+dfsg-2 creates predic…9.8
Are you affected by CVE-2014-6302?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST