Lucene search

K
nvd[email protected]NVD:CVE-2014-2611
HistoryJun 19, 2014 - 10:50 a.m.

CVE-2014-2611

2014-06-1910:50:04
CWE-22
web.nvd.nist.gov

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

Low

0.023 Low

EPSS

Percentile

89.7%

Directory traversal vulnerability in the fndwar web application in HP Executive Scorecard 9.40 and 9.41 allows remote authenticated users to execute arbitrary code, or obtain sensitive information or delete data, via unspecified vectors, aka ZDI-CAN-2120.

Affected configurations

NVD
Node
hpexecutive_scorecardMatch9.40
OR
hpexecutive_scorecardMatch9.41

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

Low

0.023 Low

EPSS

Percentile

89.7%

Related for NVD:CVE-2014-2611