What’s Vulnerable › Vulnerabilities

CVE-2014-6303

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2015-02-19 · updated 2026-06-17
• Weakness: CWE-399

Description

The Monitoring Administration pages in PNMsoft Sequence Kinetics before 7.7 do not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.

Affected products

• Pnmsoft Sequence Kinetics: through 7.5

References

• http://licensing.pnmsoft.com/documents/Security%20Bulletins/Security%20Bulletin%202014-1.htm
• http://twitter.com/d_gianni/statuses/562628862648270849/photo/1
• http://licensing.pnmsoft.com/documents/Security%20Bulletins/Security%20Bulletin%202014-1.htm
• http://twitter.com/d_gianni/statuses/562628862648270849/photo/1

Get alerted when CVE-2014-6303 or the next vulnerability affects your stack