CVE-2014-0171

MEDIUM · CVSS 5 EPSS 2.11%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2015-01-15 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2014-0171

Severity

MEDIUM

CVSS

EPSS

2.11%

Original Filing — NVD Description

XML external entity (XXE) vulnerability in StaxXMLFactoryProvider2 in Odata4j, as used in Red Hat JBoss Data Virtualization before 6.0.0 patch 4, allows remote attackers to read arbitrary files via a crafted request to a REST endpoint.