Back to Database
Status published
Medium
CVE-2014-6302
The Monitoring Administration pages in PNMsoft Sequence Kinetics before 7.7...
Vulnerability Description
The Monitoring Administration pages in PNMsoft Sequence Kinetics before 7.7 allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-6302
Credits & Attribution
No credits recorded in the NVD database.
References
More from pnmsoft
View All →CVE-2014-6304
The Form Controls CSS file in PNMsoft Sequence Kinetics before...
Medium
5
CVE-2014-6303
The Monitoring Administration pages in PNMsoft Sequence Kinetics before 7.7...
Medium
5
CVE-2014-6301
Multiple cross-site scripting (XSS) vulnerabilities in the tables-management module in...
Medium
4.3
Affected Vendor
pnmsoft
View all reports →Affected Software
sequence kinetics
Vulnerable Versions:
0
Timeline
Official Publish:
February 19th, 2015
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.