Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistHpCVELIST:CVE-2014-2609
HistoryJun 19, 2014 - 10:00 a.m.

CVE-2014-2609

2014-06-1910:00:00
hp
www.cve.org

7.7 High

AI Score

Confidence

Low

0.572 Medium

EPSS

Percentile

97.7%

JSON

The Java Glassfish Admin Console in HP Executive Scorecard 9.40 and 9.41 does not require authentication, which allows remote attackers to execute arbitrary code via a session on TCP port 10001, aka ZDI-CAN-2116.

Related

nvd 1
zdi 1
cve 1
prion 1
securityvulns 2
nvd
nvd
CVE-2014-2609
2014-06-19 10:50:04
zdi
zdi
Hewlett-Packard IT Executive Scorecard Java Glassfish Admin Console Remote Code Execution Vulnerability
2014-06-18 00:00:00
cve
cve
CVE-2014-2609
2014-06-19 10:50:04
prion
prion
Authentication flaw
2014-06-19 10:50:00
securityvulns
securityvulns
[security bulletin] HPSBMU03048 rev.1 - HP Software Executive Scorecard, Remote Execution of Code, Directory Traversal
2014-06-19 00:00:00
HP Software Executive Scorecard security vulnerabilities
2014-06-19 00:00:00

7.7 High

AI Score

Confidence

Low

0.572 Medium

EPSS

Percentile

97.7%

JSON
Related for CVELIST:CVE-2014-2609
nvd1zdi1cve1prion1securityvulns2