CVE-2014-0171: ODATA4J Project ODATA4J

Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days.

XML external entity (XXE) vulnerability in StaxXMLFactoryProvider2 in Odata4j, as used in Red Hat JBoss Data Virtualization before 6.0.0 patch 4, allows remote attackers to read arbitrary files via a crafted request to a REST endpoint.

Affected products

• ODATA4J Project ODATA4J: affected versions not specified
• Red Hat JBoss Data Virtualization: up to and including 6.0.0

Published 2015-01-15. Last modified 2026-06-17.