CVE-2014-2611

Опубликовано: 19 июн. 2014

Источник: nvd

CVSS2: 9

EPSS Низкий

Описание

Directory traversal vulnerability in the fndwar web application in HP Executive Scorecard 9.40 and 9.41 allows remote authenticated users to execute arbitrary code, or obtain sensitive information or delete data, via unspecified vectors, aka ZDI-CAN-2120.

Ссылки

http://secunia.com/advisories/59363
Third Party Advisory
http://www.securityfocus.com/bid/68093
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1030439
Third Party Advisory
VDB Entry
http://zerodayinitiative.com/advisories/ZDI-14-210/
Third Party Advisory
VDB Entry
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04341295
Vendor Advisory
http://secunia.com/advisories/59363
Third Party Advisory
http://www.securityfocus.com/bid/68093
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1030439
Third Party Advisory
VDB Entry
http://zerodayinitiative.com/advisories/ZDI-14-210/
Third Party Advisory
VDB Entry
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04341295
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:hp:executive_scorecard:9.40:*:*:*:*:*:*:*

cpe:2.3:a:hp:executive_scorecard:9.41:*:*:*:*:*:*:*

EPSS

Процентиль: 85%

0.02427

Низкий

9 Critical

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-q9g2-pqgh-r6q5

github

больше 3 лет назад