CVE-2014-6303
EUVD-2014-618719.02.2015, 11:59
The Monitoring Administration pages in PNMsoft Sequence Kinetics before 7.7 do not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| pnmsoft | sequence_kinetics | 𝑥 ≤ 7.5 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References