CVE-2014-5392: Medium severity siemens operation scheduler vulnerability
XML External Entity (XXE) vulnerability in JobScheduler before 1.6.4246 and 7.x before 1.7.4241 allows remote attackers to cause a denial of service and read arbitrary files or directories via a request containing an XML external entity declaration in conjunction with an entity reference.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2014-5392?
CVE-2014-5392 has a high severity rating due to its ability to cause denial of service and allow unauthorized file access.
How do I fix CVE-2014-5392?
To fix CVE-2014-5392, upgrade to JobScheduler version 1.6.4246 or 1.7.4241 or later.
What types of attacks can exploit CVE-2014-5392?
Exploitation of CVE-2014-5392 can lead to denial of service and unauthorized reading of sensitive files.
Which versions of JobScheduler are affected by CVE-2014-5392?
JobScheduler versions before 1.6.4246 and 1.7.4241 are affected by CVE-2014-5392.
Is CVE-2014-5392 related to XML vulnerabilities?
Yes, CVE-2014-5392 is specifically an XML External Entity (XXE) vulnerability.