Security Advisory
CVE-2014-9360
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
XML external entity (XXE) vulnerability in Scalix Web Access 11.4.6.12377 and 12.2.0.14697 allows remote attackers to read arbitrary files and trigger requests to intranet servers via a crafted request.