CVE-2014-9360: XML external entity (XXE) vulnerability in Scalix Web Access 11.4.6.12377 and 12.2.0.14697 allows remote at...

Security readout for executives and security teams

CVE-2014-9360 affects Scalix Web Access and can let a remote attacker make the application read files it should not or contact internal systems on the attacker’s behalf. For executives, the concern is exposure of sensitive server-side data and use of the mail web interface as a bridge into internal network resources. Organizations are likely exposed only if they still run Scalix Web Access 11.4.6.12377 or 12.2.0.14697, especially if reachable from the internet or untrusted users. Evidence in the bundle does not identify other affected products or versions. Prioritize remediation if Scalix Web Access is still deployed, particularly on internet-facing mail infrastructure. The business risk is unauthorized file disclosure and internal network probing through a trusted application, but urgency depends on whether the affected product and versions are present. Mitigation focus: Inventory Scalix Web Access deployments and confirm exact versions.; Check Scalix or vendor guidance for fixed versions or supported remediation.; Restrict access to Scalix Web Access from untrusted networks where possible..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.