CVE-2014-6303
Last modified
CVE-2014-6303 is a vulnerability of currently unknown severity. The Monitoring Administration pages in PNMsoft Sequence Kinetics before 7.7 do not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.. EPSS estimates a 1.22% chance of exploitation in the next 30 days.
Description
The Monitoring Administration pages in PNMsoft Sequence Kinetics before 7.7 do not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Pnmsoft | Sequence Kinetics | <= 7.5 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2014-6303?
How severe is CVE-2014-6303?
How do I fix CVE-2014-6303?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2014
- CVE-2014-6297Cross-site scripting (XSS) vulnerability in the mm_forum ext…
- CVE-2014-6298Unrestricted file upload vulnerability in the mm_forum exten…
- CVE-2014-6299Cross-site request forgery (CSRF) vulnerability in the mm_fo…
- CVE-2014-6300Cross-site scripting (XSS) vulnerability in the micro histor…
- CVE-2014-6301Multiple cross-site scripting (XSS) vulnerabilities in the t…
- CVE-2014-6302The Monitoring Administration pages in PNMsoft Sequence Kine…
- CVE-2014-6304The Form Controls CSS file in PNMsoft Sequence Kinetics befo…
- CVE-2014-6308Directory traversal vulnerability in OSClass before 3.4.2 al…
- CVE-2014-6309The HTTP and WebSocket engine components in the server in Ka…7.5
- CVE-2014-6310Buffer overflow in CHICKEN 4.9.0 and 4.9.0.1 may allow remot…9.8
- CVE-2014-6311generate_doygen.pl in ace before 6.2.7+dfsg-2 creates predic…9.8
- CVE-2014-6312Cross-site request forgery (CSRF) vulnerability in the Login…
Are you affected by CVE-2014-6303?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST