← Vulnerability feed

Vulnerability record · CVE-2014-8162 · published 14 May 2015

CVE-2014-8162: Redhat network satellite vulnerability

Redhat · Network Satellite

XML external entity (XXE) in the RPC interface in Spacewalk and Red Hat Network (RHN) Satellite 5.7 and earlier allows remote attackers to read arbitrary files and possibly have other unspecified impact via unknown vectors.

7.5 CVSS 2.0 High EPSS 2.7% · top 14.8%
7.5CVSS 2.0 base score
2.7%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

XML external entity (XXE) in the RPC interface in Spacewalk and Red Hat Network (RHN) Satellite 5.7 and earlier allows remote attackers to read arbitrary files and possibly have other unspecified impact via unknown vectors.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00020.html
http://rhn.redhat.com/errata/RHSA-2015-0957.html Vendor Advisory
http://www.securityfocus.com/bid/74595
http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00020.html
http://rhn.redhat.com/errata/RHSA-2015-0957.html Vendor Advisory
http://www.securityfocus.com/bid/74595

Track CVE-2014-8162 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2016-3427Oracle Java SE JMX Improper Access Control VulnerabilityCVE-2016-3427 is an unspecified vulnerability in Oracle Java SE 6u113, 7u99, 8u77, Java SE Embedded 8u77, and JRockit R28.3.9, reached through vector…KEVEPSS 92%analysed5.5CVE-2016-3718ImageMagick HTTP/FTP coders allow server-side request forgery via crafted imageImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 mishandles the HTTP and FTP coders, letting a crafted image trigger server-side request forgery. A…KEVEPSS 77%analysed5.5CVE-2016-3715ImageMagick EPHEMERAL coder allows arbitrary file deletionThe EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 lets a crafted image cause deletion of arbitrary files. This is part of the…KEVEPSS 75%analysed8.6CVE-2016-1286ISC BIND DNAME signature record assertion failure denial of serviceISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 mishandle a crafted signature record for a DNAME record, triggering an assertion failure in …EPSS 62%analysed7.5CVE-2015-5194Fedoraproject fedora improper input validation vulnerabilityThe log_config_command function in ntp_parser.y in ntpd in NTP before 4.2.7p42 allows remote attackers to cause a denial of service (ntpd crash) via …EPSS 5.5%7.5CVE-2015-5219Fedoraproject fedora vulnerabilityThe ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows re…EPSS 5.8%7.5CVE-2015-5300Fedoraproject fedora vulnerabilityThe panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by de…EPSS 9.1%7.5CVE-2016-4954Ntp race condition vulnerabilityThe process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modi…EPSS 13%

Source: NIST National Vulnerability Database (record CVE-2014-8162), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.