CVE-2014-0171

No fix known EPSS 2%

XML external entity (XXE) vulnerability in StaxXMLFactoryProvider2 in Odata4j, as used in Red Hat JBoss Data Virtualization before 6.0.0 patch 4, allows remote attackers to read arbitrary files via a crafted request to a REST endpoint.

Published 2015-01-15 · CVE record · OSV

Products: redhat jboss_data_virtualization, odata4j_project odata4j