Lucene search
MitreCVE-2013-5912HistoryNov 28, 2013 - 4:37 a.m.
CVE-2013-5912
2013-11-2804:37:35
CWE-94
mitre
web.nvd.nist.gov
24
thomson reuters
velocity analytics
vhayu analytic server
cve-2013-5912
remote code execution
security vulnerability
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.8
Confidence
Low
EPSS
0.146
Percentile
95.8%
VhttpdMgr in Thomson Reuters Velocity Analytics Vhayu Analytic Server 6.94 build 2995 allows remote attackers to execute arbitrary code via a URL in the fileName parameter during an importFile action.
Affected configurations
Node
thomsonreutersvelocity_analytics_vhayu_analytic_serverMatch6.94
| Vendor | Product | Version | CPE |
|---|---|---|---|
| thomsonreuters | velocity_analytics_vhayu_analytic_server | 6.94 | cpe:2.3:a:thomsonreuters:velocity_analytics_vhayu_analytic_server:6.94:*:*:*:*:*:*:* |
References
Related
exploitdb
exploitdb
Thomson Reuters Velocity Analytics - Remote Code Injection
2013-11-22 00:00:00
nvd
nvd
CVE-2013-5912
2013-11-28 04:37:35
cvelist
cvelist
CVE-2013-5912
2013-11-28 02:00:00
prion
prion
Deserialization of untrusted data
2013-11-28 04:37:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.8
Confidence
Low
EPSS
0.146
Percentile
95.8%
Related for CVE-2013-5912