CVSS: 5.0EPSS: 0%CPEs: 6EXPL: 0CVE-2014-8927
https://notcve.org/view.php?id=CVE-2014-8927
Common Inventory Technology (CIT) before 2.7.0.2050 in IBM License Metric Tool 7.2.2, 7.5, and 9; Endpoint Manger for Software Use Analysis 9; and Tivoli Asset Discovery for Distributed 7.2.2 and 7.5 allows remote attackers to cause a denial of service (CPU consumption or application crash) via a crafted XML query, a different vulnerability than CVE-2014-8926. Common Inventory Technology (CIT) anterior a 2.7.0.2050 en IBM License Metric Tool 7.2.2, 7.5, y 9; Endpoint Manger for Software Use Analysis 9; y Tivoli Asset Discovery for Distributed 7.2.2 y 7.5 permite a atacantes remotos causar una denegación de servicio (consumo de CPU o caída de aplicación) a través de una consulta XML manipulada, una vulnerabilidad diferente a CVE-2014-8926. • http://www-01.ibm.com/support/docview.wss?uid=swg21882695 • CWE-399: Resource Management Errors •
CVSS: 5.0EPSS: 0%CPEs: 6EXPL: 0CVE-2014-8926
https://notcve.org/view.php?id=CVE-2014-8926
Common Inventory Technology (CIT) before 2.7.0.2050 in IBM License Metric Tool 7.2.2, 7.5, and 9; Endpoint Manger for Software Use Analysis 9; and Tivoli Asset Discovery for Distributed 7.2.2 and 7.5 allows remote attackers to cause a denial of service (CPU consumption or application crash) via a crafted XML query, a different vulnerability than CVE-2014-8927. Common Inventory Technology (CIT) anterior a 2.7.0.2050 en IBM License Metric Tool 7.2.2, 7.5, y 9; Endpoint Manger for Software Use Analysis 9; y Tivoli Asset Discovery for Distributed 7.2.2 y 7.5 permite a atacantes remotos causar una denegación de servicio (consumo de CPU o caída de aplicación) a través de una consulta XML manipulada, una vulnerabilidad diferente a CVE-2014-8927. • http://www-01.ibm.com/support/docview.wss?uid=swg21882695 • CWE-399: Resource Management Errors •
CVSS: 6.4EPSS: 0%CPEs: 4EXPL: 0CVE-2014-8924
https://notcve.org/view.php?id=CVE-2014-8924
The server in IBM License Metric Tool 7.2.2 before IF15 and 7.5 before IF24 and Tivoli Asset Discovery for Distributed 7.2.2 before IF15 and 7.5 before IF24 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. El servidor en IBM License Metric Tool 7.2.2 anterior a IF15 y 7.5 anterior a IF24 y Tivoli Asset Discovery for Distributed 7.2.2 anterior a IF15 y 7.5 anterior a IF24 permite a atacantes remotos leer ficheros arbitrarios o enviar solicitudes TCP a servidores de intranet a través de datos XML que contiene una declaración de entidad externa en conjunto con una referencia de entidad, relacionado con un problema de entidad externa XML (XXE). • http://www-01.ibm.com/support/docview.wss?uid=swg21882820 http://www.securitytracker.com/id/1032275 •