Lucene search

K
cve[email protected]CVE-2015-2121
HistoryMay 25, 2015 - 5:59 p.m.

CVE-2015-2121

2015-05-2517:59:00
CWE-200
web.nvd.nist.gov
37
hp
network virtualization
loadrunner
performance center
remote attack
arbitrary file reading
url
vulnerability

6.8 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.144 Low

EPSS

Percentile

95.7%

HP Network Virtualization for LoadRunner and Performance Center 8.61 and 11.52 allows remote attackers to read arbitrary files via a crafted filename in a URL to the (1) HttpServlet or (2) NetworkEditorController component, aka ZDI-CAN-2569.

6.8 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.144 Low

EPSS

Percentile

95.7%