[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$flKnLGj1Yzmn45Aq745KMD1K6Ie0LZ94BFdawZldJ3zI":3,"g5a-risk:CVE-2014-8125":117},{"success":4,"data":5,"meta":115},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":29,"epssPercentile":15,"epssTimeSeries":30,"severity":31,"affectedProducts":32,"affectedProductsCount":41,"references":42,"referencesCount":27,"weaknesses":70,"weaknessesCount":74,"isActivelyExploited":75,"cisaInfo":15,"otxData":15,"relatedBlogPosts":76,"seoMetadata":77,"configurations":102,"relatedVendorCves":113,"notableEvents":114},"CVE-2014-8125","What is CVE-2014-8125?","XML external entity (XXE) vulnerability in Drools and jBPM before 6.2.0 allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted BPMN2 file.","XML external entity (XXE) vulnerability in Drools and jBPM before 6.2.0 allows remote attackers to read arbitrary files or possibly have other unspecified im...","2015-04-21T17:59:02.603","2025-04-12T10:46:40.837",7.5,"AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":15,"CVSSMetricV2":16,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"BaseSeverity":26,"ExploitabilityScore":27,"ImpactScore":28,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","NETWORK","LOW","NONE","PARTIAL","HIGH",10,6.4,0.02636,[29,29,29,29,29,29,29],"High",[33,38],{"vendor":34,"product":35,"version":36,"criteria":37,"vulnerable":4},"redhat","drools","*","cpe:2.3:a:redhat:drools:*:*:*:*:*:*:*:*",{"vendor":34,"product":39,"version":36,"criteria":40,"vulnerable":4},"jbpm","cpe:2.3:a:redhat:jbpm:*:*:*:*:*:*:*:*",2,[43,47,50,53,57,60,62,64,66,68],{"url":44,"source":45,"tags":46},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2015-0850.html","Red Hat",[],{"url":48,"source":45,"tags":49},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2015-0851.html",[],{"url":51,"source":45,"tags":52},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=1169553",[],{"url":54,"source":55,"tags":56},"https:\u002F\u002Fgithub.com\u002Fdroolsjbpm\u002Fdrools\u002Fcommit\u002Fc48464c3b246e6ef0d4cd0dbf67e83ccd532c6d3","GitHub",[],{"url":58,"source":55,"tags":59},"https:\u002F\u002Fgithub.com\u002Fdroolsjbpm\u002Fjbpm\u002Fcommit\u002F713e8073ecf45623cfc5c918c5cbf700203f46e5",[],{"url":44,"source":45,"tags":61},[],{"url":48,"source":45,"tags":63},[],{"url":51,"source":45,"tags":65},[],{"url":54,"source":55,"tags":67},[],{"url":58,"source":55,"tags":69},[],[71],{"id":72,"name":72,"description":73},"Unknown","NVD-CWE-Other",1,false,[],{"title":78,"metaDescription":79,"keywords":80,"canonicalUrl":81,"structuredData":82},"What is CVE-2014-8125? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2014-8125, a high severity cyber security vulnerability from 2015. XML external entity (XXE) vulnerability in Drools and jBPM b...","CVE-2014-8125, CVE-2014-8125 vulnerability, CVE-2014-8125 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2015, CVSS score, exploit, patch, remediation, redhat security, drools vulnerability, jbpm vulnerability","\u002Fwhat-is\u002Fcve-2014-8125",{"@context":83,"@type":84,"headline":78,"description":79,"datePublished":10,"dateModified":11,"author":85,"publisher":89,"about":93,"mainEntityOfPage":97,"articleSection":100,"keywords":101},"https:\u002F\u002Fschema.org","TechArticle",{"@type":86,"name":87,"url":88},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":86,"name":87,"url":88,"logo":90},{"@type":91,"url":92},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":94,"name":6,"description":95,"additionalType":96},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":98,"@id":99},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2014-8125","Cybersecurity","CVE-2014-8125, CVE-2014-8125 vulnerability, CVE-2014-8125 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[103],{"Operator":15,"Negate":15,"Nodes":104},[105],{"Operator":106,"Negate":15,"CPEMatch":107},"OR",[108,111],{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":109,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":110},"957BA818-ECDF-44F3-B4D8-597BD245AF3B","6.1.0",{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":112,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":110},"7C4C5475-C380-400B-8B50-12F8AA49708D",[],[],{"lastModified":11,"cacheTime":116,"version":21},1792353185114,{"score":118,"band":119,"action":120,"scoredAt":121},46,"Medium","Plan remediation","2026-10-17T07:38:00.240412+00:00"]