CVE-2014-2645

2014-10-0501:55:08

CWE-20

[email protected]

web.nvd.nist.gov

sim

clickjacking

cve-2014-2645

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.8 Medium

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.2%

JSON

HP Systems Insight Manager (SIM) before 7.4 allows remote attackers to conduct clickjacking attacks via unknown vectors.

Affected configurations

NVD

Node

hpsystems_insight_managerRange≤7.3

hpsystems_insight_managerMatch7.0

hpsystems_insight_managerMatch7.1

hpsystems_insight_managerMatch7.2

CPENameOperatorVersion
hp:systems_insight_managerhp systems insight managerle7.3
hp:systems_insight_managerhp systems insight managereq7.0
hp:systems_insight_managerhp systems insight managereq7.1
hp:systems_insight_managerhp systems insight managereq7.2

CPE	Name	Operator	Version
hp:systems_insight_manager	hp systems insight manager	le	7.3
hp:systems_insight_manager	hp systems insight manager	eq	7.0
hp:systems_insight_manager	hp systems insight manager	eq	7.1
hp:systems_insight_manager	hp systems insight manager	eq	7.2