CVE-2014-3629
XML external entity (XXE) vulnerability in the XML Exchange module in Apache Qpid 0.30 allows...
XML external entity (XXE) vulnerability in the XML Exchange module in Apache Qpid 0.30 allows remote attackers to cause outgoing HTTP connections via a crafted message.
Exploit likelihood
What each source reports
NVD Score used
XML external entity (XXE) vulnerability in the XML Exchange module in Apache Qpid 0.30 allows remote attackers to cause outgoing HTTP connections via a crafted message.
- Record
CVE-2014-3629- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-19
- Updated
- 2026-11-02
CVE List No score
XML external entity (XXE) vulnerability in the XML Exchange module in Apache Qpid 0.30 allows remote attackers to cause outgoing HTTP connections via a crafted message.
- Record
CVE-2014-3629- Updated
- 2026-11-02
EUVDEUVD-2014-3587 No score
XML external entity (XXE) vulnerability in the XML Exchange module in Apache Qpid 0.30 allows remote attackers to cause outgoing HTTP connections via a crafted message.
- Record
EUVD-2014-3587- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mm2c-whrj-39qm No score
XML external entity (XXE) vulnerability in the XML Exchange module in Apache Qpid 0.30 allows...
XML external entity (XXE) vulnerability in the XML Exchange module in Apache Qpid 0.30 allows remote attackers to cause outgoing HTTP connections via a crafted message.
- Record
GHSA-mm2c-whrj-39qm- Updated
- 2026-11-02
OSVUBUNTU-CVE-2014-3629 No score
XML external entity (XXE) vulnerability in the XML Exchange module in Apache Qpid 0.30 allows remote attackers to cause outgoing HTTP connections via a crafted message.
- Record
UBUNTU-CVE-2014-3629- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
qpid-cppUbuntu:16.04:LTS |
All versions, plus listed versions 0.16-9build10.16-9ubuntu10.16-9ubuntu2 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-3629 is a medium vulnerability (CVSS 4.3) in Apache Qpid, published November 17, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.92%, the 94th percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/98575
securityfocus.com/archive/1/533943/100/0/threaded
packetstormsecurity.com/files/129034/Apache-Qpid-0.30-Induced-HTTP-Requests.html
secunia.com/advisories/62235
nvd.nist.gov/vuln/detail/CVE-2014-3629
github.com/advisories/GHSA-mm2c-whrj-39qm
ubuntu.com/security/CVE-2014-3629
cve.org/CVERecord?id=CVE-2014-3629