Skip to main content

Opendaylight CVE-2014-5035

MEDIUM
2014-08-26 cve@mitre.org
XXE Opendaylight
6.8
CVSS 2.0 · NVD
Share

Severity by source

NVD PRIMARY
6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:N/C:P/I:P/A:P
Attack Vector
Network
Attack Complexity
M
Confidentiality
P
Integrity
P
Availability
P

Lifecycle Timeline

1
CVE Published
Aug 26, 2014 - 14:55 cve.org
MEDIUM 6.8

DescriptionCVE.org

The Netconf (TCP) service in OpenDaylight 1.0 allows remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference in an XML-RPC message, related to an XML External Entity (XXE) issue.

AnalysisAI

The Netconf (TCP) service in OpenDaylight 1.0 allows remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference in an XML-RPC message,. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.

Technical ContextAI

The Netconf (TCP) service in OpenDaylight 1.0 allows remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference in an XML-RPC message, related to an XML External Entity (XXE) issue. Affected products include: Opendaylight.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Opendaylight

View all
CVE-2017-1000361 HIGH POC
7.5 Apr 24

DOMRpcImplementationNotAvailableException when sending Port-Status packets to OpenDaylight. Rated high severity (CVSS 7.
CVE-2017-1000357 HIGH POC
7.5 Apr 24

Denial of Service attack when the switch rejects to receive packets from the controller. Rated high severity (CVSS 7.5),
CVE-2022-45932 HIGH POC
7.5 Nov 27

A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. Rated high severity (CVSS 7.5), this vu
CVE-2022-45930 HIGH POC
7.5 Nov 27

A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. Rated high severity (CVSS 7.5), this vu
CVE-2017-1000358 MEDIUM POC
6.5 Apr 24

Controller throws an exception and does not allow user to add subsequent flow for a particular switch. Rated medium seve
CVE-2015-1778 CRITICAL
9.8 Jun 27

The custom authentication realm used by karaf-tomcat's "opendaylight" realm in Opendaylight before Helium SR3 will authe
CVE-2017-1000359 MEDIUM POC
5.3 Apr 24

Java out of memory error and significant increase in resource consumption. Rated medium severity (CVSS 5.3), this vulner
CVE-2017-1000360 MEDIUM POC
5.3 Apr 24

StreamCorruptedException and NullPointerException in OpenDaylight odl-mdsal-xsql. Rated medium severity (CVSS 5.3), this
CVE-2022-45931 HIGH
7.5 Nov 27

A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. Rated high severity (CVSS 7.5), this vu

Same technique XXE

View all
CVE-2025-58360 HIGH POC
8.2
CVE-2025-2775 CRITICAL POC
9.3
CVE-2025-2776 CRITICAL POC
9.3
CVE-2017-12629 CRITICAL POC
9.8
CVE-2016-9563 MEDIUM POC
6.5
CVE-2013-5014 HIGH POC
7.5
CVE-2015-0923 MEDIUM POC
5.0
CVE-2014-0644 HIGH POC
7.8

Share

CVE-2014-5035 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy