VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 19, 2015· Updated Jun 17, 2026

CVE-2014-6302

CVE-2014-6302

Description

The Monitoring Administration pages in PNMsoft Sequence Kinetics before 7.7 allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Affected products

2
  • Pnmsoft/Sequence Kinetics2 versions
    cpe:2.3:a:pnmsoft:sequence_kinetics:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:pnmsoft:sequence_kinetics:*:*:*:*:*:*:*:*range: <=7.5
    • (no CPE)range: <7.7

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.