CVE-2014-0644: Emc Cloud Tiering Appliance
High severity, CVSS 7.8. EPSS: 53.3% chance of exploitation in the next 30 days.
EMC Cloud Tiering Appliance (CTA) 10 through SP1 allows remote attackers to read arbitrary files via an api/login request containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, as demonstrated by reading the /etc/shadow file.
Affected products
Published 2014-04-17. Last modified 2026-06-17.