VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 19, 2015· Updated Jun 17, 2026

CVE-2014-6303

CVE-2014-6303

Description

The Monitoring Administration pages in PNMsoft Sequence Kinetics before 7.7 do not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.

Affected products

2
  • Pnmsoft/Sequence Kinetics2 versions
    cpe:2.3:a:pnmsoft:sequence_kinetics:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:pnmsoft:sequence_kinetics:*:*:*:*:*:*:*:*range: <=7.5
    • (no CPE)range: <7.7

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.