Lucene search

K
cve[email protected]CVE-2014-4840
HistoryOct 19, 2014 - 1:55 a.m.

CVE-2014-4840

2014-10-1901:55:15
CWE-20
web.nvd.nist.gov
17
ibm
tririga
application platform
rce
url
security vulnerability
nvd
cve-2014-4840

7.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.024 Low

EPSS

Percentile

90.0%

IBM TRIRIGA Application Platform 3.2 and 3.3 before 3.3.0.2, 3.3.1 before 3.3.1.3, 3.3.2 before 3.3.2.2, and 3.4 before 3.4.0.1 allows remote attackers to execute arbitrary code via a crafted URL.

Affected configurations

NVD
Node
ibmtririga_application_platformMatch3.2
OR
ibmtririga_application_platformMatch3.2.1
OR
ibmtririga_application_platformMatch3.3.0.0
OR
ibmtririga_application_platformMatch3.3.0.1
OR
ibmtririga_application_platformMatch3.3.1.0
OR
ibmtririga_application_platformMatch3.3.1.1
OR
ibmtririga_application_platformMatch3.3.1.2
OR
ibmtririga_application_platformMatch3.3.2.0
OR
ibmtririga_application_platformMatch3.3.2.1
OR
ibmtririga_application_platformMatch3.4.0.0

7.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.024 Low

EPSS

Percentile

90.0%

Related for CVE-2014-4840