[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fnhjyJN9j_Xcm3ajogA_U00Wn37mSoPlwKPnpVCEDrws":3,"g5a-risk:CVE-2014-0054":284},{"success":4,"data":5,"meta":282},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":28,"epssPercentile":15,"epssTimeSeries":29,"severity":30,"affectedProducts":31,"affectedProductsCount":112,"references":113,"referencesCount":145,"weaknesses":146,"weaknessesCount":155,"isActivelyExploited":156,"cisaInfo":15,"otxData":15,"relatedBlogPosts":157,"seoMetadata":158,"configurations":183,"relatedVendorCves":266,"notableEvents":267},"CVE-2014-0054","What is CVE-2014-0054?","The Jaxb2RootElementHttpMessageConverter in Spring MVC in Spring Framework before 3.2.8 and 4.0.0 before 4.0.2 does not disable external entity resolution, which allows remote attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via crafted XML, aka an XML External Entity (XXE) issue.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-4152, CVE-2013-7315, and CVE-2013-6429.","The Jaxb2RootElementHttpMessageConverter in Spring MVC in Spring Framework before 3.2.8 and 4.0.0 before 4.0.2 does not disable external entity resolution, w...","2014-04-17T14:55:06.417","2025-04-12T10:46:40.837",6.8,"AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":15,"CVSSMetricV2":16,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"BaseSeverity":23,"ExploitabilityScore":26,"ImpactScore":27,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":4},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","NETWORK","MEDIUM","NONE","PARTIAL",8.6,6.4,0.91354,[28,28,28,28,28,28,28],"Medium",[32,37,40,43,46,49,52,55,58,61,64,67,70,74,77,80,83,86,89,92,95,98,101,104,107,110],{"vendor":33,"product":34,"version":35,"criteria":36,"vulnerable":4},"springsource","spring_framework","3.0.0","cpe:2.3:a:springsource:spring_framework:3.0.0:*:*:*:*:*:*:*",{"vendor":33,"product":34,"version":38,"criteria":39,"vulnerable":4},"3.0.0.m1","cpe:2.3:a:springsource:spring_framework:3.0.0.m1:*:*:*:*:*:*:*",{"vendor":33,"product":34,"version":41,"criteria":42,"vulnerable":4},"3.0.0.m2","cpe:2.3:a:springsource:spring_framework:3.0.0.m2:*:*:*:*:*:*:*",{"vendor":33,"product":34,"version":44,"criteria":45,"vulnerable":4},"3.0.1","cpe:2.3:a:springsource:spring_framework:3.0.1:*:*:*:*:*:*:*",{"vendor":33,"product":34,"version":47,"criteria":48,"vulnerable":4},"3.0.2","cpe:2.3:a:springsource:spring_framework:3.0.2:*:*:*:*:*:*:*",{"vendor":33,"product":34,"version":50,"criteria":51,"vulnerable":4},"3.0.3","cpe:2.3:a:springsource:spring_framework:3.0.3:*:*:*:*:*:*:*",{"vendor":33,"product":34,"version":53,"criteria":54,"vulnerable":4},"3.0.4","cpe:2.3:a:springsource:spring_framework:3.0.4:*:*:*:*:*:*:*",{"vendor":33,"product":34,"version":56,"criteria":57,"vulnerable":4},"3.0.5","cpe:2.3:a:springsource:spring_framework:3.0.5:*:*:*:*:*:*:*",{"vendor":33,"product":34,"version":59,"criteria":60,"vulnerable":4},"3.2.5","cpe:2.3:a:springsource:spring_framework:3.2.5:*:*:*:*:*:*:*",{"vendor":33,"product":34,"version":62,"criteria":63,"vulnerable":4},"3.2.6","cpe:2.3:a:springsource:spring_framework:3.2.6:*:*:*:*:*:*:*",{"vendor":33,"product":34,"version":65,"criteria":66,"vulnerable":4},"4.0.0","cpe:2.3:a:springsource:spring_framework:4.0.0:rc1:*:*:*:*:*:*",{"vendor":33,"product":34,"version":68,"criteria":69,"vulnerable":4},"4.0.1","cpe:2.3:a:springsource:spring_framework:4.0.1:*:*:*:*:*:*:*",{"vendor":71,"product":34,"version":72,"criteria":73,"vulnerable":4},"vmware","*","cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:*",{"vendor":71,"product":34,"version":75,"criteria":76,"vulnerable":4},"3.0.6","cpe:2.3:a:vmware:spring_framework:3.0.6:*:*:*:*:*:*:*",{"vendor":71,"product":34,"version":78,"criteria":79,"vulnerable":4},"3.0.7","cpe:2.3:a:vmware:spring_framework:3.0.7:*:*:*:*:*:*:*",{"vendor":71,"product":34,"version":81,"criteria":82,"vulnerable":4},"3.1.0","cpe:2.3:a:vmware:spring_framework:3.1.0:*:*:*:*:*:*:*",{"vendor":71,"product":34,"version":84,"criteria":85,"vulnerable":4},"3.1.1","cpe:2.3:a:vmware:spring_framework:3.1.1:*:*:*:*:*:*:*",{"vendor":71,"product":34,"version":87,"criteria":88,"vulnerable":4},"3.1.2","cpe:2.3:a:vmware:spring_framework:3.1.2:*:*:*:*:*:*:*",{"vendor":71,"product":34,"version":90,"criteria":91,"vulnerable":4},"3.1.3","cpe:2.3:a:vmware:spring_framework:3.1.3:*:*:*:*:*:*:*",{"vendor":71,"product":34,"version":93,"criteria":94,"vulnerable":4},"3.1.4","cpe:2.3:a:vmware:spring_framework:3.1.4:*:*:*:*:*:*:*",{"vendor":71,"product":34,"version":96,"criteria":97,"vulnerable":4},"3.2.0","cpe:2.3:a:vmware:spring_framework:3.2.0:*:*:*:*:*:*:*",{"vendor":71,"product":34,"version":99,"criteria":100,"vulnerable":4},"3.2.1","cpe:2.3:a:vmware:spring_framework:3.2.1:*:*:*:*:*:*:*",{"vendor":71,"product":34,"version":102,"criteria":103,"vulnerable":4},"3.2.2","cpe:2.3:a:vmware:spring_framework:3.2.2:*:*:*:*:*:*:*",{"vendor":71,"product":34,"version":105,"criteria":106,"vulnerable":4},"3.2.3","cpe:2.3:a:vmware:spring_framework:3.2.3:*:*:*:*:*:*:*",{"vendor":71,"product":34,"version":108,"criteria":109,"vulnerable":4},"3.2.4","cpe:2.3:a:vmware:spring_framework:3.2.4:*:*:*:*:*:*:*",{"vendor":71,"product":34,"version":65,"criteria":111,"vulnerable":4},"cpe:2.3:a:vmware:spring_framework:4.0.0:milestone1:*:*:*:*:*:*",26,[114,118,123,127,131,135,137,139,141,143],{"url":115,"source":116,"tags":117},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2014-0400.html","Red Hat",[],{"url":119,"source":120,"tags":121},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F57915","Secunia",[122],"Vendor Advisory",{"url":124,"source":125,"tags":126},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Fsecurity-advisory\u002Fcpuapr2018-3678067.html","Oracle",[],{"url":128,"source":129,"tags":130},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F66148","Securityfocus",[],{"url":132,"source":133,"tags":134},"https:\u002F\u002Fjira.spring.io\u002Fbrowse\u002FSPR-11376","Spring",[122],{"url":115,"source":116,"tags":136},[],{"url":119,"source":120,"tags":138},[122],{"url":124,"source":125,"tags":140},[],{"url":128,"source":129,"tags":142},[],{"url":132,"source":133,"tags":144},[122],10,[147],{"id":148,"name":149,"description":150,"extendedDescription":151,"status":152,"abstraction":153,"structure":154},"CWE-352","Cross-Site Request Forgery (CSRF)","The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.","When a web server is designed to receive a request from a client without any mechanism for verifying that it was intentionally sent, then it might be possible for an attacker to trick a client into making an unintentional request to the web server which will be treated as an authentic request. This can be done via a URL, image load, XMLHttpRequest, etc. and can result in exposure of data or unintended code execution.","Stable","Compound","Composite",1,false,[],{"title":159,"metaDescription":160,"keywords":161,"canonicalUrl":162,"structuredData":163},"What is CVE-2014-0054? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2014-0054, a medium severity cyber security vulnerability from 2014. High exploit probability (91.4%). The Jaxb2RootElementHttp...","CVE-2014-0054, CVE-2014-0054 vulnerability, CVE-2014-0054 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2014, CVSS score, exploit, patch, remediation, springsource security, spring_framework vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2014-0054",{"@context":164,"@type":165,"headline":159,"description":160,"datePublished":10,"dateModified":11,"author":166,"publisher":170,"about":174,"mainEntityOfPage":178,"articleSection":181,"keywords":182},"https:\u002F\u002Fschema.org","TechArticle",{"@type":167,"name":168,"url":169},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":167,"name":168,"url":169,"logo":171},{"@type":172,"url":173},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":175,"name":6,"description":176,"additionalType":177},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":179,"@id":180},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2014-0054","Cybersecurity","CVE-2014-0054, CVE-2014-0054 vulnerability, CVE-2014-0054 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[184],{"Operator":15,"Negate":15,"Nodes":185},[186],{"Operator":187,"Negate":15,"CPEMatch":188},"OR",[189,191,194,197,200,203,206,209,212,214,216,218,220,222,224,226,228,230,232,234,237,239,241,243,245,247,249,251,253,255,257,259,261,263],{"Vulnerable":4,"Criteria":36,"MatchCriteriaID":190,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"62111DAE-3E05-4D95-8B34-E2EFB6142DCA",{"Vulnerable":4,"Criteria":192,"MatchCriteriaID":193,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:springsource:spring_framework:3.0.0:m1:*:*:*:*:*:*","13E1344C-CB41-48FC-BB98-7FEBEBF190E9",{"Vulnerable":4,"Criteria":195,"MatchCriteriaID":196,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:springsource:spring_framework:3.0.0:m2:*:*:*:*:*:*","AD66E687-C387-486D-AC34-279961311A8F",{"Vulnerable":4,"Criteria":198,"MatchCriteriaID":199,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:springsource:spring_framework:3.0.0:m3:*:*:*:*:*:*","49018DD7-9E85-4B4D-B054-CD17EFB13E87",{"Vulnerable":4,"Criteria":201,"MatchCriteriaID":202,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:springsource:spring_framework:3.0.0:m4:*:*:*:*:*:*","37FC3F37-A033-491B-96F0-8B38E2E43BFA",{"Vulnerable":4,"Criteria":204,"MatchCriteriaID":205,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:springsource:spring_framework:3.0.0:rc1:*:*:*:*:*:*","12021339-C885-4A9E-95C1-4695F3DC1F76",{"Vulnerable":4,"Criteria":207,"MatchCriteriaID":208,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:springsource:spring_framework:3.0.0:rc2:*:*:*:*:*:*","6FB321B9-4838-4AAC-B8AF-C92015C946A0",{"Vulnerable":4,"Criteria":210,"MatchCriteriaID":211,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:springsource:spring_framework:3.0.0:rc3:*:*:*:*:*:*","DC19AE9E-B46C-4872-B562-E97DC80543F7",{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":213,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"32F4893D-61E6-4E7F-A30A-3AB96264531B",{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":215,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B7F99079-D584-456B-A116-62D10FBF8233",{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":217,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"9A9F796E-340B-4FF5-9322-94E57D7BCEE6",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":219,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"D8BA17FD-BC52-4D84-9753-5D41D3BC35B4",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":221,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"637484A7-AB05-4F64-9311-6741BDF2579F",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":223,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"FAE5CFA5-769F-49E9-A7A9-56C8CED8692E",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":225,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"528C85CE-2CC6-4B09-8C25-44A2B1C2D8B2",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":227,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"84A59B07-7EF0-4744-AF78-59C2C9C7DCD5",{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":229,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"373153C1-402D-4159-8B72-5C8544846CC6",{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":231,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"4D9CB60A-0AFB-4572-9406-B848B71A37F2",{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":233,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"A943BB84-9368-48F2-96DD-65EF0AEDEFE1",{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":235,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":236},"35922ADD-3B00-4928-AF5E-5449CB55D5C5","3.2.7",{"Vulnerable":4,"Criteria":76,"MatchCriteriaID":238,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B9D5172D-5E19-40C1-8C1B-CC22706E780D",{"Vulnerable":4,"Criteria":79,"MatchCriteriaID":240,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"46E410D2-DA53-4806-B296-451C3D9CDEEA",{"Vulnerable":4,"Criteria":82,"MatchCriteriaID":242,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"20D6E5AC-9898-416F-8268-3623E1706072",{"Vulnerable":4,"Criteria":85,"MatchCriteriaID":244,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B61F3E25-A415-4A25-91D6-4FBA6F575AAB",{"Vulnerable":4,"Criteria":88,"MatchCriteriaID":246,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"8A2C4C81-2E79-411C-AEB8-A5E40FC28D31",{"Vulnerable":4,"Criteria":91,"MatchCriteriaID":248,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"010915FE-3BCE-4652-8D8B-47EE085F3BEE",{"Vulnerable":4,"Criteria":94,"MatchCriteriaID":250,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"D16C8EFA-F1E4-48C3-BC86-A132873426C4",{"Vulnerable":4,"Criteria":97,"MatchCriteriaID":252,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"47CED0ED-D67E-48AF-BB1A-EB1030897A8C",{"Vulnerable":4,"Criteria":100,"MatchCriteriaID":254,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"D2E2EA60-735E-431E-BEFE-DC5C1046E532",{"Vulnerable":4,"Criteria":103,"MatchCriteriaID":256,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"DFD1FA92-7BFC-4874-89FC-BE0F378F0DB3",{"Vulnerable":4,"Criteria":106,"MatchCriteriaID":258,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"7CC0E26F-2E8B-4B30-8C43-8BD2015EBB88",{"Vulnerable":4,"Criteria":109,"MatchCriteriaID":260,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"3CB73406-5FE4-438E-BCB7-57FBF6EC38D0",{"Vulnerable":4,"Criteria":111,"MatchCriteriaID":262,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"FD20A2BE-2024-4DAA-825E-213ACB667DE9",{"Vulnerable":4,"Criteria":264,"MatchCriteriaID":265,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:vmware:spring_framework:4.0.0:milestone2:*:*:*:*:*:*","264458EB-2332-438F-8635-414E388E25EA",[],[268,275],{"id":269,"eventType":270,"eventTime":271,"details":272,"label":273,"color":274},"65c187ff-6283-43bd-9014-c02b9b15dad2","LOW_EPSS_DELTA","2025-04-20T01:15:35.173275+00:00","Daily EPSS score decreased by 0.405 on 2023-12-30","EPSS Score Decreased","green",{"id":276,"eventType":277,"eventTime":278,"details":279,"label":280,"color":281},"5fe079b8-12e2-49d1-b675-d03d9fcfa409","HIGH_EPSS_DELTA","2026-06-16T04:06:45.206176+00:00","Daily EPSS score increased by 0.893 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":283,"version":21},1792242078459,{"score":285,"band":30,"action":286,"scoredAt":287},60,"Plan remediation","2026-10-17T07:08:34.548662+00:00"]