cve.bz

CVE-2014-3485

no score yetEPSS 1.5%

redhat enterprise virtualization: no CVSS score yet. EPSS 1.5% chance of exploitation in the next 30 days.

The REST API in the ovirt-engine in oVirt, as used in Red Hat Enterprise Virtualization (rhevm) 3.4, allows remote authenticated users to read arbitrary files and have other unspecified impact via unknown vectors, related to an XML External Entity (XXE) issue.
EPSS
1.5% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-11-01)
CWE
CWE-200
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON