← All advisories

High severity7.5NVD Advisory· Published Aug 21, 2019· Updated Jun 17, 2026

CVE-2019-14258

CVE-2019-14258

Description

The XML-RPC subsystem in Zenoss 2.5.3 allows XXE attacks that lead to unauthenticated information disclosure via port 9988.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Zenoss/Core2 versions
cpe:2.3:a:zenoss:zenoss:2.5.3:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:zenoss:zenoss:2.5.3:*:*:*:*:*:*:*
- (no CPE)range: 2.5.3
Zenoss/Zenossdescription

Patches

Vulnerability mechanics

References

2

www.coalfire.com/The-Coalfire-Blog/August-2019/Getting-more-from-a-compliance-testnvdExploitMitigationThird Party Advisory
www.coalfire.com/The-Coalfire-BlognvdThird Party Advisory

News mentions

0

No linked articles in our index yet.