CVE-2014-3629
XML external entity (XXE) vulnerability in the XML Exchange module in Apache Qpid 0.30 allows...
CVE-2014-3629 is a medium vulnerability (CVSS 4.3) in Apache Qpid, published November 17, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.92%, the 94th percentile. No source names a fixed version.
- Severity
- 4.3 MediumCVSS 2.0, NVD
- Exploit chance
- 6.92%EPSS, 94th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
XML external entity (XXE) vulnerability in the XML Exchange module in Apache Qpid 0.30 allows remote attackers to cause outgoing HTTP connections via a crafted message.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
qpid-cppUbuntu:16.04:LTS | All versions, plus listed versions 0.16-9build10.16-9ubuntu10.16-9ubuntu2 | None known |
What each source reports
NVD Score used
XML external entity (XXE) vulnerability in the XML Exchange module in Apache Qpid 0.30 allows remote attackers to cause outgoing HTTP connections via a crafted message.
- Record
CVE-2014-3629- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-19
- Updated
- 2026-11-02
CVE ListNo score
XML external entity (XXE) vulnerability in the XML Exchange module in Apache Qpid 0.30 allows remote attackers to cause outgoing HTTP connections via a crafted message.
- Record
CVE-2014-3629- Updated
- 2026-11-02
EUVDEUVD-2014-3587No score
XML external entity (XXE) vulnerability in the XML Exchange module in Apache Qpid 0.30 allows remote attackers to cause outgoing HTTP connections via a crafted message.
- Record
EUVD-2014-3587- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mm2c-whrj-39qmNo score
XML external entity (XXE) vulnerability in the XML Exchange module in Apache Qpid 0.30 allows...
XML external entity (XXE) vulnerability in the XML Exchange module in Apache Qpid 0.30 allows remote attackers to cause outgoing HTTP connections via a crafted message.
- Record
GHSA-mm2c-whrj-39qm- Updated
- 2026-11-02
OSVUBUNTU-CVE-2014-3629No score
XML external entity (XXE) vulnerability in the XML Exchange module in Apache Qpid 0.30 allows remote attackers to cause outgoing HTTP connections via a crafted message.
- Record
UBUNTU-CVE-2014-3629- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
exchange.xforce.ibmcloud.com/vulnerabilities/98575
securityfocus.com/archive/1/533943/100/0/threaded
packetstormsecurity.com/files/129034/Apache-Qpid-0.30-Induced-HTTP-Requests.html
secunia.com/advisories/62235
nvd.nist.gov/vuln/detail/CVE-2014-3629
github.com/advisories/GHSA-mm2c-whrj-39qm
ubuntu.com/security/CVE-2014-3629
cve.org/CVERecord?id=CVE-2014-3629