Unrated severityNVD Advisory· Published Jul 2, 2014· Updated May 6, 2026

CVE-2014-3066

Description

IBM Tivoli Endpoint Manager 9.1 before 9.1.1088.0 allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Affected products

IBM/Tivoli Endpoint Manager
cpe:2.3:a:ibm:tivoli_endpoint_manager:9.1:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www-01.ibm.com/support/docview.wssnvdVendor Advisory
secunia.com/advisories/58672nvd
secunia.com/advisories/58906nvd
www-01.ibm.com/support/docview.wssnvd
www.securitytracker.com/id/1030508nvd
exchange.xforce.ibmcloud.com/vulnerabilities/93630nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000