Lucene search
+L

CVE-2014-4872

🗓️ 10 Oct 2014 10:00:00Reported by certccType 
cve
 cve
🔗 web.nvd.nist.gov👁 82 Views🌐 WEB

BMC Track-It! 11.3.0.355 allows unauthenticated access on TCP port 9010, leading to potential remote code execution and sensitive data exposure

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
zdt
zdt
BMC Track-It! - Multiple Vulnerabilities
9 Oct 201400:00
zdt
zdt
zdt
Numara / BMC Track-It! FileStorageService Arbitrary File Upload Exploit
21 Oct 201400:00
zdt
attackerkb
ATTACKERKB
CVE-2014-4872
10 Oct 201410:55
attackerkb
circl
Circl
CVE-2014-4872
21 Oct 201400:00
circl
cvelist
Cvelist
CVE-2014-4872
10 Oct 201410:00
cvelist
exploitdb
Exploit DB
BMC Track-It! - Multiple Vulnerabilities
9 Oct 201400:00
exploitdb
exploitdb
Exploit DB
Numara / BMC Track-It! FileStorageService - Arbitrary File Upload (Metasploit)
21 Oct 201400:00
exploitdb
exploitdb
Exploit DB
BMC Track-It! 11.4 - Multiple Vulnerabilities
28 Sep 201500:00
exploitdb
exploitpack
exploitpack
BMC Track-It! 11.4 - Multiple Vulnerabilities
28 Sep 201500:00
exploitpack
exploitpack
exploitpack
BMC Track-It! - Multiple Vulnerabilities
9 Oct 201400:00
exploitpack
Rows per page
NVD
Node
bmctrack-it!Match11.3.0.355
ParameterPositionPathDescriptionCWE
FileStorageServicebinarytcp://HOST:9010/TrackIt.Core.FileStorageServiceUnauthenticated .NET Remoting upload to FileStorageService allowing arbitrary file upload and potential code execution.CWE-306
ConfigurationServicebinarytcp://HOST:9010/TrackIt.Core.ConfigurationServiceUnauthenticated .NET Remoting upload to ConfigurationService allowing arbitrary file upload and potential code execution.CWE-306
filenamepathTrackItWeb/Installers/filename.aspxUploaded web shell file executed via Installers path after remote upload.CWE-306

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 00:10Current
9.5High risk
Vulners AI Score9.5
CVSS 27.5
EPSS0.80095
82