CVE-2014-3242

SOAPpy vulnerable to XML External Entity attacks

5.0 Medium

SOAPpy 0.12.5 allows remote attackers to read arbitrary files via a SOAP request containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Exploit likelihood

1.81%Up 0.6 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Record: CVE-2014-3242
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness: CWE-200
Updated: 2026-11-02

CVE List No score

Record: CVE-2014-3242
Updated: 2026-11-02

EUVDEUVD-2022-2479 No score

Record: EUVD-2022-2479
Updated: 2026-11-03

GitHub AdvisoriesGHSA-52wr-3vww-rmpq No score

SOAPpy vulnerable to XML External Entity attacks

Record: GHSA-52wr-3vww-rmpq
Weakness: CWE-611
Updated: 2026-11-02

OSVGHSA-52wr-3vww-rmpq No score

SOAPpy vulnerable to XML External Entity attacks

Record: GHSA-52wr-3vww-rmpq
Weakness: CWE-611
Updated: 2026-11-02

OSVPYSEC-2026-924 No score

SOAPpy vulnerable to XML External Entity attacks

Record: PYSEC-2026-924
Updated: 2026-11-02

OSVUBUNTU-CVE-2014-3242 No score

Record: UBUNTU-CVE-2014-3242
Updated: 2026-11-02

Affected products

makina-corpus soappy

Affected packages

Affected packages
Package	Affected	Fixed
`soappy` PyPI	through 0.12.5	None known
`soappy` PyPI	through 0.12.5, plus listed versions 0.12.10.12.30.12.4	None known
`python-soappy` Ubuntu:14.04:LTS	All versions, plus listed versions 0.12.0-4	None known

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-3242 is a medium vulnerability (CVSS 5.0) in Makina-corpus Soappy, published May 12, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.81%, the 78th percentile. No source names a fixed version.

References

Show 7 moreShow less