CVE-2014-8162

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

XML external entity (XXE) in the RPC interface in Spacewalk and Red Hat Network (RHN) Satellite 5.7 and earlier allows remote attackers to read arbitrary files and possibly have other unspecified impact via unknown vectors.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published: May 14, 2015
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2014

CVE-2014-81636.5Directory traversal vulnerability in the XMLRPC interface in Red Hat Satellite 5.CVE-2014-81649.1A insecure configuration for certificate verification (http.verify_mode = OpenSSL::SSL::VERIFY_NONE) may lead to verification bypass in Red CVE-2014-816510.0scripts/amsvis/powerpcAMS/amsnet.py in powerpc-utils-python uses the pickle Python module unsafely, which allows remote attackers to execute CVE-2014-81668.8The browsing feature in the server in CUPS does not filter ANSI escape sequences from shared printer names, which might allow remote attacke CVE-2014-81675.9vdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate a man-in-the-middle attack CVE-2014-81686.1Red Hat Satellite 6 allows local users to access mongod and delete pulp_database.CVE-2014-81694.4automount 5.0.8, when a program map uses certain interpreted languages, uses the calling user's USER and HOME environment variable values in CVE-2014-81708.8ovirt_safe_delete_config in ovirtfunctions.py and other unspecified locations in ovirt-node 3.0.0-474-gb852fd7 as packaged in Red Hat Enterp CVE-2014-81715.5The memory resource controller (aka memcg) in the Linux kernel allows local users to cause a denial of service (deadlock) by spawning new pr CVE-2014-81724.9The filesystem implementation in the Linux kernel before 3.13 performs certain operations on lists of files with an inappropriate locking ap CVE-2014-81737.2The pmd_none_or_trans_huge_or_clear_bad function in include/asm-generic/pgtable.h in the Linux kernel before 3.13 on NUMA systems does not p CVE-2014-81749.8eDeploy makes it easier for remote attackers to execute arbitrary code by leveraging use of HTTP to download files.