What is the CVSS score of CVE-2014-7177?

CVE-2014-7177 has a CVSS 2.0 base score of 4.0 (Medium). CVSS vector: AV:N/AC:L/Au:S/C:P/I:N/A:N. EPSS exploitation probability: 12.3%.

Is there a public PoC exploit available for CVE-2014-7177?

Yes, a public proof-of-concept exploit is available for CVE-2014-7177. Prioritise patching immediately. EPSS: 12.3%.

Tuleap CVE-2014-7177

MEDIUM

2014-10-31 cve@mitre.org

XXE Tuleap

4.0

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

4.0 MEDIUM

AV:N/AC:L/Au:S/C:P/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:S/C:P/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Confidentiality

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

Oct 31, 2014 - 14:55 cve.org

MEDIUM 4.0

DescriptionCVE.org

XML External Entity vulnerability in Enalean Tuleap 7.2 and earlier allows remote authenticated users to read arbitrary files via a crafted xml document in a create action to plugins/tracker/.

AnalysisAI

XML External Entity vulnerability in Enalean Tuleap 7.2 and earlier allows remote authenticated users to read arbitrary files via a crafted xml document in a create action to plugins/tracker/. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 12.3%.

Technical ContextAI

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Tuleap

View all

CVE-2017-7411 HIGH Act Now POC

8.8 Oct 30

An issue was discovered in Enalean Tuleap 9.6 and prior versions. Rated high severity (CVSS 8.8), this vulnerability is

CVE-2014-8791 MEDIUM This Month POC

6.0 Dec 02

project/register.php in Tuleap before 7.7, when sys_create_project_in_one_step is disabled, allows remote authenticated

CVE-2014-7178 CRITICAL Emergency POC

9.3 Nov 28

Enalean Tuleap before 7.5.99.6 allows remote attackers to execute arbitrary commands via the User-Agent header, which is

CVE-2017-7981 HIGH Act Now POC

8.8 Apr 29

Tuleap before 9.7 allows command injection via the PhpWiki 1.3.10 SyntaxHighlighter plugin. Rated high severity (CVSS 8.

CVE-2018-7538 CRITICAL Act Now POC

9.8 Mar 12

A SQL injection vulnerability in the tracker functionality of Enalean Tuleap software engineering platform before 9.18 a

CVE-2014-7176 MEDIUM This Month POC

6.5 Nov 04

SQL injection vulnerability in Enalean Tuleap before 7.5.99.4 allows remote authenticated users to execute arbitrary SQL

CVE-2018-7634 HIGH This Week POC

8.8 Mar 01

An issue was discovered in Enalean Tuleap 9.17. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitab

CVE-2021-41147 HIGH This Week POC

7.2 Oct 15

Tuleap Open ALM is a libre and open source tool for end to end traceability of application and system developments. Rate

CVE-2018-17298 CRITICAL Act Now

9.8 Sep 21

An issue was discovered in Enalean Tuleap before 10.5. Rated critical severity (CVSS 9.8), this vulnerability is remotel

CVE-2024-46988 MEDIUM This Month POC

5.7 Oct 14

Tuleap is a tool for end to end traceability of application and system developments. Rated medium severity (CVSS 5.7), t

CVE-2024-52599 MEDIUM This Month POC

5.4 Dec 09

Tuleap is an open source suite to improve management of software developments and collaboration. Rated medium severity (

CVE-2022-39233 MEDIUM This Month POC

5.4 Oct 19

Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. Rated medium seve

Same technique XXE

View all

CVE-2025-58360 HIGH POC

8.2

CVE-2025-2775 CRITICAL POC

9.3

CVE-2025-2776 CRITICAL POC

9.3

CVE-2017-12629 CRITICAL POC

9.8

CVE-2016-9563 MEDIUM POC

6.5

CVE-2013-5014 HIGH POC

7.5

CVE-2015-0923 MEDIUM POC

5.0

CVE-2014-0644 HIGH POC

7.8

CVE-2014-7177 vulnerability details – vuln.today

Back