CVE-2014-5392: Sos Jobscheduler

Medium severity, CVSS 5.8. EPSS: 2.5% chance of exploitation in the next 30 days.

XML External Entity (XXE) vulnerability in JobScheduler before 1.6.4246 and 7.x before 1.7.4241 allows remote attackers to cause a denial of service and read arbitrary files or directories via a request containing an XML external entity declaration in conjunction with an entity reference.

Affected products

• Sos Jobscheduler: up to and including 1.6.4131; version 1.6.4014 only; version 1.6.4043 only; version 1.7.4177 only; version 1.7.4189 only

Published 2014-09-23. Last modified 2026-06-17.