Lucene search
HistoryJun 19, 2014 - 10:50 a.m.
CVE-2014-2610
cve-2014-2610
directory traversal
hp executive scorecard
cap
content acceleration pack
web application
remote authenticated users
arbitrary code
zdi-can-2117
7.4 High
AI Score
Confidence
Low
7.1 High
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:S/C:C/I:C/A:C
0.041 Low
EPSS
Percentile
92.1%
Directory traversal vulnerability in the Content Acceleration Pack (CAP) web application in HP Executive Scorecard 9.40 and 9.41 allows remote authenticated users to execute arbitrary code by uploading an executable file, aka ZDI-CAN-2117.
| CPE | Name | Operator | Version |
|---|---|---|---|
| hp:executive_scorecard | hp executive scorecard | eq | 9.40 |
| hp:executive_scorecard | hp executive scorecard | eq | 9.41 |
Related
zdi
zdi
prion
prion
Directory traversal
2014-06-19 10:50:00
cvelist
cvelist
CVE-2014-2610
2014-06-19 10:00:00
securityvulns
securityvulns
7.4 High
AI Score
Confidence
Low
7.1 High
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:S/C:C/I:C/A:C
0.041 Low
EPSS
Percentile
92.1%
Related for CVE-2014-2610