CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It affects Java. It may be remotely exploitable. It may lead to a denial-of-service condition.
CVE
CVE-2014-3630
Severity
CRITICAL
CVSS
9.8
EPSS
2.87%
Java
Original NVD Description
XML external entity (XXE) vulnerability in the Java XML processing functionality in Play before 2.2.6 and 2.3.x before 2.3.5 might allow remote attackers to read arbitrary files, cause a denial of service, or have unspecified other impact via crafted XML data.
Related CVEs
Other vulnerabilities affecting the same vendor(s)