CVE-2014-6303: Pnmsoft Sequence Kinetics

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

The Monitoring Administration pages in PNMsoft Sequence Kinetics before 7.7 do not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.

Affected products

• Pnmsoft Sequence Kinetics: up to and including 7.5

Published 2015-02-19. Last modified 2026-06-17.