Skip to content
OpenAdvisories
Unscored CVE-2014-6303 EUVD-2014-6187GHSA-xfr3-2vw7-gq74

The Monitoring Administration pages in PNMsoft Sequence Kinetics before 7.7 do not properly detect recursion during entity expansion, which…

Published Feb 19, 2015 · Updated Aug 6, 2024 · Assigned by mitre

Description

The Monitoring Administration pages in PNMsoft Sequence Kinetics before 7.7 do not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.

References