What’s Vulnerable › Vulnerabilities

CVE-2014-0030

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 16.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-10-10 · updated 2026-06-17
• Weakness: CWE-611

Description

The XML-RPC protocol support in Apache Roller before 5.0.3 allows attackers to conduct XML External Entity (XXE) attacks via unspecified vectors.

Affected products

• Apache Software Foundation Apache Roller: 3.1, 4.0, 4.0.1, 5.0, 5.0.1, 5.0.2

References

• https://liftsecurity.io/advisories/Apache_Roller_XML-RPC_susceptible_to_XXE/
• https://mail-archives.apache.org/mod_mbox/roller-dev/201401.mbox/%3CCAF1aazCMzDGB12Ls4t-SOwNA=OdguD010LX3yZGhk2GQHafFXw%40mail.gmail.com%3E
• https://www.exploit-db.com/exploits/45341/
• https://liftsecurity.io/advisories/Apache_Roller_XML-RPC_susceptible_to_XXE/
• https://mail-archives.apache.org/mod_mbox/roller-dev/201401.mbox/%3CCAF1aazCMzDGB12Ls4t-SOwNA=OdguD010LX3yZGhk2GQHafFXw%40mail.gmail.com%3E
• https://www.exploit-db.com/exploits/45341/

Get alerted when CVE-2014-0030 or the next vulnerability affects your stack