CVE-2014-4769 | BDVDB-2026-66025 Detail

Description#

IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.8 allows remote authenticated users to read arbitrary files or send TCP requests to intranet servers via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www-01.ibm.com/support/docview.wss?uid=swg1JR50553
http://www-01.ibm.com/support/docview.wss?uid=swg1JR49897
https://exchange.xforce.ibmcloud.com/vulnerabilities/94836
http://www-01.ibm.com/support/docview.wss?uid=swg21685464
http://www.securityfocus.com/bid/70872

Exploit#

No public exploit known

History#

Version 12014-11-05Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.