CVE-2014-2607

2014-05-2600:25:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2014-2607

hp operations manager

remote code execution

authenticated users

security vulnerability

7.4 High

AI Score

Confidence

Low

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

74.0%

JSON

Unspecified vulnerability in HP Operations Manager i 9.1 through 9.13 and 9.2 through 9.24 allows remote authenticated users to execute arbitrary code by leveraging the OMi operator role.

CPENameOperatorVersion
hp:operations_manager_ihp operations manager ieq9.24
hp:operations_manager_ihp operations manager ieq9.2
hp:operations_manager_ihp operations manager ieq9.13
hp:operations_manager_ihp operations manager ieq9.23
hp:operations_manager_ihp operations manager ieq9.1
hp:operations_manager_ihp operations manager ieq9.12

CPE	Name	Operator	Version
hp:operations_manager_i	hp operations manager i	eq	9.24
hp:operations_manager_i	hp operations manager i	eq	9.2
hp:operations_manager_i	hp operations manager i	eq	9.13
hp:operations_manager_i	hp operations manager i	eq	9.23
hp:operations_manager_i	hp operations manager i	eq	9.1
hp:operations_manager_i	hp operations manager i	eq	9.12