Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2014-0170

Teiid before 8.4.3 and before 8.7 and Red Hat JBoss Data Virtualization 6.0.0 before patch 3 allows remote attackers to read arbitrary files via a crafted request to a REST endpoint, related to an XML External Entity (XXE) issue.

  • Published: Sep 30, 2014
  • Updated: Apr 13, 2023
  • CVE: CVE-2014-0170
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:P/I:N/A:N

No CWE or OWASP classifications available.

Software From Fixed in
redhat / jboss_data_virtualization - 6.0.0.x
jboss / teiid - 8.6.x
jboss / teiid 8.4 8.4.x