CVE-2014-9360

Name of the Vulnerable Software and Affected Versions Scalix Web Access versions 11.4.6.12377 through 12.2.0.14697

Description The issue allows remote attackers to read arbitrary files and trigger requests to intranet servers via a crafted request. This is due to an XML external entity (XXE) vulnerability.

Recommendations For versions 11.4.6.12377 through 12.2.0.14697, consider disabling the XML parsing functionality until a patch is available. Restrict access to sensitive files and intranet servers to minimize the risk of exploitation.