VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 11, 2014· Updated Jun 17, 2026

CVE-2014-3485

CVE-2014-3485

Description

The REST API in the ovirt-engine in oVirt, as used in Red Hat Enterprise Virtualization (rhevm) 3.4, allows remote authenticated users to read arbitrary files and have other unspecified impact via unknown vectors, related to an XML External Entity (XXE) issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Red Hat/Enterprise Virtualization2 versions
    cpe:2.3:a:redhat:enterprise_virtualization:3.4:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:redhat:enterprise_virtualization:3.4:*:*:*:*:*:*:*
    • (no CPE)range: = 3.4

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.