CVE-2019-14258 - The XML-RPC subsystem in Zenoss 2.5.3 allows XXE attacks that lead to unauthenticated information disclosure via port 9988

HIGH

The XML-RPC subsystem in Zenoss 2.5.3 allows XXE attacks that lead to unauthenticated information disclosure via port 9988

Published Aug 21, 2019

7.5

HIGH

CVSS 3.0

EPSS 1.73%

The XML-RPC subsystem in Zenoss 2.5.3 allows XXE attacks that lead to unauthenticated information disclosure via port 9988.

No remediation recorded yet.

Weaknesses (1)

CWE-611

XXE

Link	Providers	Tags
https://www.coalfire.com/The-Coalfire-Blog		x_refsource_MISCThird Party Advisory
https://www.coalfire.com/The-Coalfire-Blog/August-2019/Getting-more-from-a-compliance-test		x_refsource_CONFIRMExploitMitigationThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Aug 21, 2019

Updated Aug 5, 2024

Reserved Jul 24, 2019

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner n/a

Published n/a

Updated n/a

Exploited since n/a

Link n/a